Information Security Senior

- Make and conduct internal regulations which regards to security or regards to SBV regulation request;

- Ensure all Information Security Policy documents definition and Management of Information Security Risk Register;

- Responsible for defining/implementing security frameworks for existing and new systems. (application review, penetration test and vulnerability assessment);

- Risk Assessment and Risk Treatment to be reviewed on a regular interval along with the Risk coordinators and risk owners;

- Management Reporting on Information Security Projects and Risk Remediation Status;

- Coordinate with IT System throughout Project implementation phase;

- Oversee risk repository ensuring all risk are properly monitored and recorded;

- Make The Third Party Security Assessment;

- The Assessment of the Security controls during the vendor empanelment;

- Internal/External Information Security audit to be completed and coordinated;

- Coordinate the development and delivery of an education and training program on information security and privacy matters for employees, partners and vendors.

- Other tasks assigned by Manager and BOD

- Bachelors in Information Technology (or equivalent);

- 4-5 years of relevant experience;

- Have experience in IT department of Bank or Financial Institute;

- Ability to make internal regulation;

- Professional certifications: any of the CEH/CISA/CSIM/CISSP certification;

- Good knowledge and hands on experience on information security implementation both at Infrastructure and Application level;

- Good written and verbal communication skills and Stakeholder management ability;

- Ability to speak in both business and information security;

- Good English communication;

- Enthusiastic, honor in working.

- 12 leave days and adding more every 3 years

Hồ sơ theo yêu cầu của nhà tuyển dụng khi liên hệ trực tiếp