Adecco's client, a well-respected leading financial institution in Vietnam is actively looking for talents to fill in the opening of Chief Information Security Officer, who will cover security strategic planning as well as IT risk management from end to end to secure
Job Responsibilities
Responsibilities
As the Chief Information Security Officer (CISO), you will report to the Head of the IT Division and be responsible for:
- Overseeing IT security risks and vulnerabilities: Regularly perform and review information security risk and vulnerability analyses, as well as system activity audits, to address any gaps.
- Developing the bank’s security strategy and roadmap: Create a comprehensive IT security program, including an assessment of the current situation, a proposed future state, and a deployment roadmap with quick wins and multi-year plans.
- Leading information security initiatives for the IT Division: Take charge of all information security initiatives, reporting progress to the CIO, peers, and management, with performance measured by KPIs agreed upon with the CIO.
- Designing and building the security practice and architecture: Lead the redesign of IT security standards, operations, and practices as needed, with performance measured by KPIs agreed upon with the CIO.
- Ensuring security by design in IT projects: Incorporate security design principles into IT systems and maintain these standards across the bank’s operations and deployments.
- Managing and reporting on IT/cybersecurity vulnerabilities and risks: Conduct periodic IT security control testing (e.g., vulnerability testing, risk analysis, and security assessments) and address identified gaps within a defined timeframe, reporting to internal controls, management, and executive bodies.
- Performing PCI-DSS assessments: Fulfill PCI-DSS obligations for current and new projects and systems, with performance measured by KPIs agreed upon with the CIO.
- Conducting IT security awareness programs: Publish monthly security updates and bulletins, and conduct training sessions to improve IT security knowledge among users and staff. Provide advice and consultancy on security risks and controls.
- Managing IT/cybersecurity incidents: Handle and contain cybersecurity incidents to protect corporate IT assets, intellectual property, regulated data, and the company’s reputation.
- Directing external vendors/investigators: Manage IT security vendor delivery and contribute to IT security investigations with external parties, regulatory bodies, and bank control functions.
- Establishing disaster recovery and business continuity plans: Develop and implement a comprehensive Disaster Recovery Program, including policies and procedures for network, platform, data, and application recovery. Collaborate with the Business Continuity team and key IT leaders to document and publish the bank’s disaster recovery architecture.
- Developing and monitoring a comprehensive cybersecurity program: Continuously develop and oversee a robust cybersecurity program for the bank.
- Proficient in technical skills related to network, application, and operating system security and hardening, vulnerability assessments, penetration testing, TCP/IP suite, firewalls, Security Information & Event Management (SIEM), Data Loss Protection (DLP), intrusion detection systems, log review, and incident management.
- Familiarity with security compliance, especially PCI-DSS.
- Understanding of ISO 27001/2 information security standards.
- Awareness of current IT industry trends.
- Knowledge of relevant legal and regulatory requirements.
- Familiarity with common information security management frameworks.
- Expertise in technical areas such as network, application, and operating system security and hardening, vulnerability assessments, penetration testing, TCP/IP suite, firewalls, SIEM, DLP, intrusion detection systems, log review, and incident management.
- Proficiency in security compliance, particularly PCI-DSS.
- Understanding of ISO 27001/2 information security standards.
- Awareness of current IT industry trends.
- Knowledge of relevant legal and regulatory requirements.
- Familiarity with common information security management frameworks.
- Bachelor’s degree in IT or Computer Science, with CISSP or CISA certification preferred.
- Additional higher qualifications or certifications are advantageous.
- Van Anh Nguyen
- Adecco
Với sự ra đời của kỷ nguyên Xe thông minh, LG hy vọng sẽ trở thành một đối tác sáng tạo trong lĩnh vực điện khí hóa phương tiện thông qua việc phát triển các thành phần công nghệ tiên tiến. Công ty Giải pháp Thành phần Xe (VS) đang phát triển nhiều loại sản phẩm có tính cạnh tranh cao. Các sản phẩm của chúng tôi bao gồm hệ thống Thông tin giải trí trong xe như Viễn thông, Điều hướng AV, Âm thanh hiển thị, Hệ thống Hiển thị Tích hợp và Hệ thống Hỗ trợ Người lái Nâng cao (ADAS) được gọi là 'an toàn thông minh' và các thiết bị tiện lợi khác. Công ty chúng tôi cũng đang tập trung vào kỹ thuật xe, bao gồm Hệ thống truyền lực, Bộ pin xe điện tử, v.v. và đang cung cấp chúng cho các khách hàng lớn trong ngành công nghiệp xe trên toàn thế giới.
Chúng tôi cung cấp một môi trường cho phép đồng nghiệp thể hiện năng lực của họ, tập trung vào công việc và tạo ra giá trị