Mô tả Công việc Cybersecurity risk and compliance framework and management: Identify, highlight and remediate information security risk in Company Policy, Standards and Processes: Comply with Company's Information Security Policy, Regulations, Standards, and Process Provide feedback to enhance the current policies, regulations, standards and processes where necessary Communicate and ensure all staff understands and comply with the Information Security Policy, Regulations, Standards and Processes Security operation & administration: Apply new security standards/technique guidle to Company Ensure that the Information Security Strategy and Plans are implemented as planned. Proposing of technological solutions/technology to ensure information security in order to improve the current security status of the information system. Coordinate with project members to implement the roadmap. Implement/control and/or maintain security solutions/devices/tools as WAF, Firewall, IPS, PIM, DLP, vulnerabilities management, Encryption, 2-factor auth, ... Control approves the request/changes related to security, control activities of IT security: implementing, operating, vulnerabilities management Contribute to the IT Security Dash Board for Management Training IT security awareness. Area of Information Security Specialization: Provide the appropriate guidance and advisory in the area of specialization Be able to contribute to the Bank in terms of documentation, transfer of ideas and implementing the plans in the area of specialization Identify, highlight and remediate information security risk in Company Comply with Company's Information Security Policy, Regulations, Standards, and Process Provide feedback to enhance the current policies, regulations, standards and processes where necessary Communicate and ensure all staff understands and comply with the Information Security Policy, Regulations, Standards and Processes Apply new security standards/technique guidle to Company Ensure that the Information Security Strategy and Plans are implemented as planned. Proposing of technological solutions/technology to ensure information security in order to improve the current security status of the information system. Coordinate with project members to implement the roadmap. Implement/control and/or maintain security solutions/devices/tools as WAF, Firewall, IPS, PIM, DLP, vulnerabilities management, Encryption, 2-factor auth, ... Control approves the request/changes related to security, control activities of IT security: implementing, operating, vulnerabilities management Contribute to the IT Security Dash Board for Management Training IT security awareness. Provide the appropriate guidance and advisory in the area of specialization Be able to contribute to the Bank in terms of documentation, transfer of ideas and implementing the plans in the area of specializationYêu Cầu Công Việc Bachelor's or Technical Degree Required (IT, Cryptography, computer science, information systems, business administration or other industry-related curriculum). Has appropriate subject matter expertise in their area of information security specialisation. 3 years or more of working experience in IT security banking, good knowledge international IT security standards (ISO 270001, PCI-DSS...), ITIL. Have good knowledge about: network security, system security, application security and viruses/malware, secure encryption. Have in-depth knowledge of architecture, security technology, and integration. Have good knowledge of pen testing with OWSAP Standard and the ability to detect & exploit vulnerabilities and network attacks. Good use/Knowing of some security technologies: Encryption, PKI, BYOD, DLP, PIM, ... Experience in implementing ISO27000/PCI-DSS is preferred. Have good knowledge of encryption and encryption techniques. Have ability to read and understand the professional documents in English.Laptop Chế độ bảo hiểm Du Lịch Chế độ thưởng Chăm sóc sức khỏe Đào tạo Tăng lương