Head of IT Security

JOB DESCRIPTION

Objective
Develops, implements, and maintains an effective information security program to ensure the protection of the our Client's information and computing resources.
Key responsibilities/duties:
lEnsures confidentiality, integrity, and availability of Home credit information and computing systems by managing the planning, implementation, and enhancement of the Bank's Information Security assurance program.
lServes as a project manager or provides project oversight for Information Security related projects.
lManages technically skilled individuals by performing normal management functions of staffing, planning, controlling, and directing; reviewing and evaluating performance; reviewing employment candidates; recommending salary increases and promotions for the Information Security group; and preparing budget for area of supervision.
lAccommodates the Home credit automation objectives and development of Home credit policies on information security by developing strategic, tactical and operational information security plans.
lDevelops and administers internal information security assurance, standards and procedures.
lProvides oversight for all Information Security related incidents and investigations.
lProvides Security Consulting Services Bank Management and Business functions as needed in a manner that is consistent with the risk framework identified by the Home credit System Information Security policy.
lContributes to and participates Home credit Operational Risk Management.
lServes as a central point of contact with staff and Internal Audit department, and external audit functions for consultation on information security issues, controls and compliance .
lOversees the implementation of information security awareness programs for Home credit's staff.
lEnsures that safety rules and regulations are adhered to by personnel in area, and performs job duties and responsibilities in conformance with sound safety practices.

JOB REQUIREMENT

Fluent English and Vietnamese – spoken & written
Bachelor's degree or equivalent experience.
Minimum of five years work experience directly in the information security field.
Minimum of three years management or similar leadership experience.
Excellent risk management, enterprise defense, consulting and external "threat awareness" competencies.
Strong knowledge of various automated security control systems, encryption, message authentication, vulnerability assessment, intrusion detection, penetration testing, incident response, and manual control procedures. 
Working knowledge of security systems associated with computing platforms, networking, operating systems and applications. 
Strong knowledge, experience or understanding of security policy or control frameworks and risk assessment tools.
Possesses conflict resolution and values of openness, honesty and respect.
Very strong analytical, planning, problem solving, organizational, project management skills and the ability to multi-task well.
Very strong interpersonal, oral and written communication skills, including the ability to communicate with all levels of organization and European HQ.
Ability to understand and manage complex technical and security problems that require attention to detail, timely resolution and a high degree of discretion.
Nice to have:
Experience with regulation of financial industry in Vietnam preferred.
CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager) or similar Information Security certifications preferred.

WHAT'S ON OFFER

Monthly allowance (600k)
13th-month Salary and performance- based KPI Bonus (1-3 months)
15+ Annual Leaves
Flexible time, Work-from-home policies 
Full Social Insurance, 24/7 Accidental Insurance, Annual Medical Check- up,Premium PTI 24/7 
Team Building and CSR activities: Year- end Party, New-year Party, Company trip, Charity activities, Blood donation
Learning workshops: Free Udemy E-learning, English courses, Senior management development training programs

CONTACT

PEGASI – IT Recruitment Consultancy | Email: recruit@pegasi.com.vn | Tel: +84 28 3622 8666
We are PEGASI – IT Recruitment Consultancy in Vietnam. If you are looking for new opportunity for your career path, kindly visit our website www.pegasi.com.vn for your reference. Thank you!

Job Summary

Company Type:

Product

Technical Skills:

Security

Location:

Ho Chi Minh - Viet Nam

Working Policy:

Job ID:

J01048

Status:

Close

Related Job:

Security Architect

Ho Chi Minh, Ha Noi - Viet Nam


Outsource

  • Security

Offer expert guidance on Security Architecture to assist business and project teams in understanding the security implications of proposed system changes and solutions. Evaluate proposed solutions to ensure compliance with Information Risk Policy and organizational risk tolerance. Analyze non-standard flows across systems, applications, and proposed solutions to identify security risks, threats, and vulnerabilities. Identify necessary security control components, countermeasures, and design requirements to address the identified risks. Create conceptual and logical security architecture designs for proposed solutions. Define security controls across various areas including Identity and Access, Data and Media Protection, Security Information, and Event Management, Communications, Configurations, and Vulnerability Management. Determine suitable security controls to address identified risks, factoring in technical capability, business benefit, and commercial implications. Manage technical deviations and major risks, including suggesting alternative solutions or compensating controls to mitigate potential impacts. Influence stakeholders to update solution requirements to reflect relevant security needs. Supervise significant architectural decisions to ensure secure outcomes and compliance with governance practices. Assist in the deployment of required notifications and engagement with relevant Technology Architecture Forums. Utilize and update existing security control reference patterns. Develop new security patterns describing integration approaches, use cases, reusable components, and technical references for enterprise security capabilities. Proactively manage security risk and assurance requirements when developing designs that may alter the organization's risk posture. Support compliance with internal security policies, governance requirements, and risk management expectations. Engage with various business and technology stakeholders to influence security aspects within target-state architectures and central technology roadmaps. Provide guidance and mentorship on the practical application of security and risk management concepts, principles, strategies, and industry standards. Assist in the professional development of colleagues by sharing security knowledge and helping them develop relevant capabilities.

Negotiation

View details

Post-Sales Network & Cybersecurity Engineer

Ho Chi Minh, Ha Noi - Viet Nam


Outsource

  • Network
  • Security

Implementing solutions and providing technical support for networking and cybersecurity solutions, including various vendors' products. Analyzing customer requirements, designing solutions, and overseeing the entire project delivery process. Troubleshooting network and security issues, identifying root causes, and implementing corrective actions. Creating and managing technical documentation, including implementation plans, test plans, and network diagrams. Collaborating with customers, sales, project managers, presales, and vendor technical support teams for successful project delivery. Providing system handovers, technical training, knowledge transfer, and operational guidance to customers. Participating in maintenance, upgrades, migrations, and after-hours support as needed. Constantly updating knowledge in networking and security technologies, developing technical expertise, and obtaining relevant certifications.#Successful performance indicators Timely project delivery that meets technical requirements. Stable systems, timely incident resolution, and minimal downtime. Highly satisfied customers and effective post-sales support. Thorough technical documentation and appropriate system handover. Efficient coordination and escalation with customers and vendor technical support teams. Ongoing professional development, relevant certifications, and contributions to team best practices.

Negotiation

View details

Senior IT Infrastructure Engineer

Ho Chi Minh - Viet Nam


Product

  • System
  • IT inhouse

Develop and create enterprise hardware systems, evaluating and selecting options that best meet the organization's needs. Operate, maintain, and upgrade VMWare, OpenStack environments, backup software, and libraries. Manage infrastructure environment server hardware and firmware, consolidating and improving system components like virtualization, backup servers, SAN, Hardware security module, rack, and storage systems mainly in PDC, DRC to meet the organization's current and future requirements. Contribute to IT projects, providing technical expertise and guidance on infrastructure-related components. Ensure information security by implementing appropriate measures in the infrastructure environment to fulfill the requirements of internal and external audits. Design converged SAN architecture and maintain SAN devices such as switches and storage, upgrading firmware when needed. Perform capacity planning for free space, performance, and usage, and proactively monitor systems to identify and address performance issues. Manage and monitor data center systems such as fire alarm and air conditioning, and plan server room layout and cabling. Test all changes to SAN networks, hardware, and software to ensure smooth implementation and operation. Document issues and resolutions and prepare status reports and reviews for management. Foster a strong collaborative relationship with various teams, seamlessly merging efforts into a harmonious and unified team. Hold primary accountability for maintaining the smooth operation and availability of the datacenter, in strict adherence to SLA requirements. Prioritize swift resolution of any emerging issues to minimize downtime.

Negotiation

View details