Công Ty Cổ Phần Giao Nhận Hàng Hóa Nasco

Operational security
Monitor all mandatory security penetration tests and internal vulnerabilities and follow up on all remediation.
Support to revise Business Continuity Plan and Disaster Recovery Manager during Disaster Recovery exercises.
Conduct all IT security controls effectively
Review and approve all Firewall changes and ensure that only appropriate access is granted when required and in line with Firewall Approval Guidelines.
Reviews of security configurations of key systems against regional baselines and identifying gaps to fix.
Review of critical systems' security logs and identify suspicious/abnormal events of the systems.
Review IT security patch management.
Monitor end-point security controls.
Control Privileged IDs and the release for usage.
Conduct regular user access management activities.
Functional level
Develops, implements and maintains IT security program to Supports Company, and administrative use IT resources.
Educates, advises and trains users to ensure the security of the company's networks, systems and data.
Participates in design and capacity planning for new products and technologies associated with information security.
Assists with projects concerning the evaluation and implementation of security-related technologies.
Support to alignment of technology stacks across the company.
Ownership of security incident responses, investigations, and support in any emergency situations with remediation.
Monitors the changes in guidelines and support the tactical adoption of IT governance strategies.
Develops/maintains policies and procedures surrounding IT risk assessment, IT security, and IT Disaster Recovery through close partnerships.
Support on-going management, internal testing and remediation to ensure sustainability with IT compliance.
Plans, coordinates and directs staff in the quality assurance program for organization.
Designing programs, policies and procedures to ensure continuous improvement of IT services and maintain the integrity of systems.
Establishing security policies to access to information system, user rights and privileges to applications, system security utilities.
Addresses the security data processing facilities/operations, risk management audits and compliance with established policies.Education
University degree in Information Technology/Computer Sciences or University degree in Accounting/Auditing
Other required Degree, Professional Qualifications and Certifications
Preferred IT Certificates: CCNA + MCSE or CCNP Security + MCSA
Preferred IT Security Certificates: CISSP or CISM.
Technical/ Professional/ Specific Competency Requirements
Strong written and verbal communication skills enabling effective communication of complex technical issues to non-technical users at all levels of the Organization.
Strong analytical and problem-solving skills
Relevant Working Experience:
3-4 years in IT Security/ Data Privacy or IT Advisory or/and Auditing
Required Languages:
English
Information technology/ Technical tools
Depth technical knowledge in Windows, Unix and network security or IT risks/controls assessment and improvementBonus: 13th salary + KPI Bonus
Healthcare Plan: Family Health & Accident Insurance
Paid Leave: 18 days of paid annual leave