XREX

Requirements
- Bachelor’s degree in Information Security, Computer Science, IT Management, Risk Management, or related fields

- 3–5 years of experience in information security, with both policy writing and audit experience

- Familiar with frameworks like ISO 27001, CIS Controls, or MAS TRM

- Able to review IT processes, design controls, and write security policies and SOPs

- Experience supporting internal/external audits or regulatory checks

- Able to track and report on audit findings and improvement plans

Preferred Traits
- Good understanding of how to turn regulations into practical rules and workflows

- Able to work independently and coordinate across departments

- Strong writing and documentation skills

- Compliance-minded and aware of how security affects business and reputation

- Detail-oriented, good at identifying key risks and control points

Nice to Have
- Certifications such as CISA, CISM, or ISO 27001 LA/LI

- Experience in cross-team projects or process reviews

- Familiarity with financial industry audits

- Experience leading security policy implementation independently

Location: Taipei (check us out on Google Maps!)

About XREX

Regarding our culture