Head of IT Security

JOB DESCRIPTION

Objective
Develops, implements, and maintains an effective information security program to ensure the protection of the our Client's information and computing resources.
Key responsibilities/duties:
lEnsures confidentiality, integrity, and availability of Home credit information and computing systems by managing the planning, implementation, and enhancement of the Bank's Information Security assurance program.
lServes as a project manager or provides project oversight for Information Security related projects.
lManages technically skilled individuals by performing normal management functions of staffing, planning, controlling, and directing; reviewing and evaluating performance; reviewing employment candidates; recommending salary increases and promotions for the Information Security group; and preparing budget for area of supervision.
lAccommodates the Home credit automation objectives and development of Home credit policies on information security by developing strategic, tactical and operational information security plans.
lDevelops and administers internal information security assurance, standards and procedures.
lProvides oversight for all Information Security related incidents and investigations.
lProvides Security Consulting Services Bank Management and Business functions as needed in a manner that is consistent with the risk framework identified by the Home credit System Information Security policy.
lContributes to and participates Home credit Operational Risk Management.
lServes as a central point of contact with staff and Internal Audit department, and external audit functions for consultation on information security issues, controls and compliance .
lOversees the implementation of information security awareness programs for Home credit's staff.
lEnsures that safety rules and regulations are adhered to by personnel in area, and performs job duties and responsibilities in conformance with sound safety practices.

JOB REQUIREMENT

Fluent English and Vietnamese – spoken & written
Bachelor's degree or equivalent experience.
Minimum of five years work experience directly in the information security field.
Minimum of three years management or similar leadership experience.
Excellent risk management, enterprise defense, consulting and external "threat awareness" competencies.
Strong knowledge of various automated security control systems, encryption, message authentication, vulnerability assessment, intrusion detection, penetration testing, incident response, and manual control procedures. 
Working knowledge of security systems associated with computing platforms, networking, operating systems and applications. 
Strong knowledge, experience or understanding of security policy or control frameworks and risk assessment tools.
Possesses conflict resolution and values of openness, honesty and respect.
Very strong analytical, planning, problem solving, organizational, project management skills and the ability to multi-task well.
Very strong interpersonal, oral and written communication skills, including the ability to communicate with all levels of organization and European HQ.
Ability to understand and manage complex technical and security problems that require attention to detail, timely resolution and a high degree of discretion.
Nice to have:
Experience with regulation of financial industry in Vietnam preferred.
CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager) or similar Information Security certifications preferred.

WHAT'S ON OFFER

Monthly allowance (600k)
13th-month Salary and performance- based KPI Bonus (1-3 months)
15+ Annual Leaves
Flexible time, Work-from-home policies 
Full Social Insurance, 24/7 Accidental Insurance, Annual Medical Check- up,Premium PTI 24/7 
Team Building and CSR activities: Year- end Party, New-year Party, Company trip, Charity activities, Blood donation
Learning workshops: Free Udemy E-learning, English courses, Senior management development training programs

CONTACT

PEGASI – IT Recruitment Consultancy | Email: recruit@pegasi.com.vn | Tel: +84 28 3622 8666
We are PEGASI – IT Recruitment Consultancy in Vietnam. If you are looking for new opportunity for your career path, kindly visit our website www.pegasi.com.vn for your reference. Thank you!

Job Summary

Company Type:

Product

Technical Skills:

Security

Location:

Ho Chi Minh - Viet Nam

Working Policy:

Job ID:

J01048

Status:

Close

Related Job:

Head of Engineering Digital

Ho Chi Minh - Viet Nam

Product

Take charge of the technical direction for the Digital Sub-Domain, ensuring timely delivery of Sprint/SDLC epics and features. Provide leadership, guidance, and support to technology team members to enhance their skills and knowledge, fostering a high-performance team. Drive technical progress by focusing on enhancing speed, reducing costs, and improving quality, ensuring alignment within the squads on objectives and outcomes. Promote lean portfolio management across the Digital domains by connecting business roadmaps with software/platform delivery, overseeing agile, cross-functional teams to meet set targets, and addressing technical or delivery blockers that cannot be resolved at the squad level. Manage financials to ensure plan achievement and facilitate continuous integration/continuous deployment (CI/CD). Develop a leading-edge capability by strategically deploying departmental resources to optimize resource allocation and drive successful Digital product development. Serve as an NICV expert and collaborate with NAB corporate IT leadership to drive innovation initiatives in AI, Cloud, and other relevant areas. Advise stakeholders on digital development, testing, deployment, and operation of Digital NAD services from the Vietnam Innovation Center. Fulfill any additional responsibilities delegated by your People Leader or an authorized representative of NAB Vietnam as needed.

Negotiation

View details

Security Architect

Ho Chi Minh, Ha Noi - Viet Nam

Outsource

  • Security

Offer expert guidance on Security Architecture to assist business and project teams in understanding the security implications of proposed system changes and solutions. Evaluate proposed solutions to ensure compliance with Information Risk Policy and organizational risk tolerance. Analyze non-standard flows across systems, applications, and proposed solutions to identify security risks, threats, and vulnerabilities. Identify necessary security control components, countermeasures, and design requirements to address the identified risks. Create conceptual and logical security architecture designs for proposed solutions. Define security controls across various areas including Identity and Access, Data and Media Protection, Security Information, and Event Management, Communications, Configurations, and Vulnerability Management. Determine suitable security controls to address identified risks, factoring in technical capability, business benefit, and commercial implications. Manage technical deviations and major risks, including suggesting alternative solutions or compensating controls to mitigate potential impacts. Influence stakeholders to update solution requirements to reflect relevant security needs. Supervise significant architectural decisions to ensure secure outcomes and compliance with governance practices. Assist in the deployment of required notifications and engagement with relevant Technology Architecture Forums. Utilize and update existing security control reference patterns. Develop new security patterns describing integration approaches, use cases, reusable components, and technical references for enterprise security capabilities. Proactively manage security risk and assurance requirements when developing designs that may alter the organization's risk posture. Support compliance with internal security policies, governance requirements, and risk management expectations. Engage with various business and technology stakeholders to influence security aspects within target-state architectures and central technology roadmaps. Provide guidance and mentorship on the practical application of security and risk management concepts, principles, strategies, and industry standards. Assist in the professional development of colleagues by sharing security knowledge and helping them develop relevant capabilities.

Negotiation

View details

Post-Sales Network & Cybersecurity Engineer

Ho Chi Minh, Ha Noi - Viet Nam

Outsource

  • Network
  • Security

Implementing solutions and providing technical support for networking and cybersecurity solutions, including various vendors' products. Analyzing customer requirements, designing solutions, and overseeing the entire project delivery process. Troubleshooting network and security issues, identifying root causes, and implementing corrective actions. Creating and managing technical documentation, including implementation plans, test plans, and network diagrams. Collaborating with customers, sales, project managers, presales, and vendor technical support teams for successful project delivery. Providing system handovers, technical training, knowledge transfer, and operational guidance to customers. Participating in maintenance, upgrades, migrations, and after-hours support as needed. Constantly updating knowledge in networking and security technologies, developing technical expertise, and obtaining relevant certifications.#Successful performance indicators Timely project delivery that meets technical requirements. Stable systems, timely incident resolution, and minimal downtime. Highly satisfied customers and effective post-sales support. Thorough technical documentation and appropriate system handover. Efficient coordination and escalation with customers and vendor technical support teams. Ongoing professional development, relevant certifications, and contributions to team best practices.

Negotiation

View details