一．信息安全管理 Information security management：
1. 制定并执行信息安全策略：负责根据企业业务需求、行业规范及贺利氏信息安全政策，制定全面的信息安全
政策、标准和流程，确保企业信息系统、数据的安全性和合规性.
Develop and implement information security policies: responsible for developing comprehensive information security
policies, standards, and processes according to enterprise business needs, industry norms and Heraeus information
security policies to ensure the security and compliance of enterprise information systems and data.
2. 风险评估与防御:定期进行信息安全风险评估,识别潜在的安全威胁和漏洞,设计并实施有效的安全防护措施.
Risk assessment and defense: Conduct regular information security risk assessment, identify potential security
threats and vulnerabilities, and design and implement effective security protection measures.
3. 应急响应：建立和完善信息安全事件应急响应机制，组织信息安全事件的调查、分析、处理和报告工作.
Emergency response: Establish and improve the emergency response mechanism for information security incidents,
and organize the investigation, analysis, processing and reporting of information security incidents.
4. 培训与意识提升:定期组织信息安全培训,提高员工的信息安全意识,确保所有员工遵守信息安全政策和规定.
Training and awareness raising: Organize information security training regularly to improve employees' awareness of
二．运营安全管理 Operation safety management：
1. 负责推进 JHA、安全作业观察等涉及现场作业和行为安全的标准；
Responsible for promoting JHA, safe operation observation and other standards related to site operation and
behavior safety.
2. 将识别出来的安全风险进行分级分类，建立、实施优化工作，并与部门合作将风险降至最低；
Graded and classified the identified safety risks, established, and implemented optimization work, and cooperated
with the department to minimize risks.
3. 完善运营相关安全生产规章制度，安全技术操作规程和作业规程
Improve the safety production rules and regulations, safety technical operating procedures and operating procedures
related to operation.
三．安保管理 Security management：
1. 建立和完善安保管理体系，对人员、物资、物品出入进行管理，对公司监控系统、门禁系统实施保密性管理。
Establish and improve the security management system, manage the access of personnel, materials, and goods, and
implement confidentiality management of the company's monitoring system.
领导分配的其他工作。