Crystal Elegance Textile Viet Nam

Overall responsibility for Information Security and Data Protection (ISP) for all locations of BGSV
o Information Security:
- Identification and assessment of ISP risks according to Bosch guidelines and standards
- Defining security level: Definition, implementation and reporting
- Informing and advising managers and associates on the implementation of and compliance with all operational and legal requirements relating to ISP and known risks
- Driving and monitoring the implementation of requirements to ISP as per Bosch standard
- Monitoring security for Outsourcing, offshore development centers
- Building awareness of ISP amongst associates
- Analyzing security incidents, identify and address common root causes, suggest LL/BP and contribute to organization's repository.
o Functional responsibility for all ISP-functions: Organize, train and support professional Data Protection and Information Security Partner of departments
- The main contact point for ISP related internal and external audits
- Lead ISMS internal audits
- Lead activities of ISO27001 Certification Audit, TISAX assessment
o Data Protection:
- Contact point with local authorities if required
- Coordinating with regional Data Protection Officer national laws in Vietnam
- Cultural and linguistic tasks such as translations, local adaptations or creation of sensitization and training material
- Implementing and advising of local data protection law
- Processing of inquiries from data subjects and data protection incidents
o Cyber security in products
- Coordinating cyber security in product development of BGSV with Product Security Officer (training, awareness, process communication,..)
- Consulting processes of cyber security, support product security relevant assessment to project manager
- Monitoring security and Data protection aspects for Enterprise IT systems of BGSV• Education: Bachelor degree of laws, economics, business administration, engineering or a comparable subject
• Qualification:
- A Vietnamese equivalent of Law degree
- ISO/IEC 27001:2022 Lead Auditor
- ISO/IEC 27005:2018 Information Security Risk Management (preferable qualification)
- ISO/IEC 27701:2019 Extension to ISO/IEC 27001 and ISO/IEC 27002 for privacy information management (preferable qualification)
• Personality: Self-motivation, work independently, process and result orientation, high level of taking responsibility and challenges, team spirit and enthusiasm
• Working method: Analytical thinking, systematic and pragmatic problem solving, communication skill, presentation skill, negotiation skill, leadership skill
• Experience and know-how: 5 years of working experience in Information Security Management domain, experience in leading cross-functional teams, auditing skills, Vietnam data protection laws
• Languages: Good communication skills in written and spoken EnglishThưởng
13th-month bonus + yearly performance bonus + annual salary appraisal
Chăm sóc sức khoẻ
Premium health insurance for employee + 2 family members
Nghỉ phép có lương
16++ days of paid leave per year