產品測試工程師-資訊安全實驗室(台北)

我們始終以超越客戶和社會的期望，及提供卓越的市場服務為己任。身為行業的領導者，SGS提供專業的商務解決方案，協助提升產品品質、安全性、生產力及降低風險；在法規日益增多的國際市場上為客戶領航。我們獨立公正的服務為客戶提供特殊的價值，並確保其業務的永續發展。
Key Responsibilities
• Cybersecurity Assessment – Conduct assessments, gap analysis, and testing for Industrial Control Systems (ICS/OT) based on the IEC 62443 series standards.
• Compliance Assessment – Support clients in establishing OT cybersecurity management systems, perform assessments, and verify compliance with international standards and local regulations.
• Compliance Solutions – Provide recommendations to strengthen ICS/OT environments, covering areas such as vulnerability remediation, risk management, product security, and supply chain security.
• Project Management & Client Engagement – Independently or collaboratively manage projects, including planning, executing assessment, drafting reports, and delivering professional advice to clients.
• Training & Knowledge Sharing – Conduct cybersecurity training sessions, workshops, and internal knowledge-sharing to enhance both client and team capabilities.
What We Offer
Opportunity to work in a global organization with cross-border cybersecurity projects and experts.
Exposure to real-world cybersecurity use cases across industries.
Career development and growth.
Qualifications
Bachelor’s degree or above in Information Security, Electrical/Electronic Engineering, Computer Science, Automation, or related fields.
Minimum 3 years of experience in cybersecurity, with at least 1 year in ICS/OT environments (e.g., power, petrochemical, manufacturing, semiconductor, medical automation).
Solid understanding of industrial network and OT-specific cybersecurity challenges.
Hands-on experience with vulnerability assessment, threat modeling, or risk assessment.
Fluent English proficiency (reading, writing, speaking, and listening) is required for working with international standards and engaging in global projects.
Preferred / Nice-to-Have
Familiarity with the IEC 62443 standards (esp. 2-1, 2-4, 3-3, 4-1, 4-2).
Professional certifications such as CISSP, CISA, CEH, GICSP, or ISA/IEC 62443 (CFS/RAS/CDS/CMS).
Practical experience with ICS technologies (DCS, SCADA, PLC, HMI).
Involvement in compliance projects related to EN 18031, IEC 62443 Cyber Resilience Act (CRA), or other regulations.
Strong communication and consulting skills to translate technical findings into business-oriented recommendations