Head of IT Security

JOB DESCRIPTION

Objective
Develops, implements, and maintains an effective information security program to ensure the protection of the our Client's information and computing resources.
Key responsibilities/duties:
lEnsures confidentiality, integrity, and availability of Home credit information and computing systems by managing the planning, implementation, and enhancement of the Bank's Information Security assurance program.
lServes as a project manager or provides project oversight for Information Security related projects.
lManages technically skilled individuals by performing normal management functions of staffing, planning, controlling, and directing; reviewing and evaluating performance; reviewing employment candidates; recommending salary increases and promotions for the Information Security group; and preparing budget for area of supervision.
lAccommodates the Home credit automation objectives and development of Home credit policies on information security by developing strategic, tactical and operational information security plans.
lDevelops and administers internal information security assurance, standards and procedures.
lProvides oversight for all Information Security related incidents and investigations.
lProvides Security Consulting Services Bank Management and Business functions as needed in a manner that is consistent with the risk framework identified by the Home credit System Information Security policy.
lContributes to and participates Home credit Operational Risk Management.
lServes as a central point of contact with staff and Internal Audit department, and external audit functions for consultation on information security issues, controls and compliance .
lOversees the implementation of information security awareness programs for Home credit's staff.
lEnsures that safety rules and regulations are adhered to by personnel in area, and performs job duties and responsibilities in conformance with sound safety practices.

JOB REQUIREMENT

Fluent English and Vietnamese – spoken & written
Bachelor's degree or equivalent experience.
Minimum of five years work experience directly in the information security field.
Minimum of three years management or similar leadership experience.
Excellent risk management, enterprise defense, consulting and external "threat awareness" competencies.
Strong knowledge of various automated security control systems, encryption, message authentication, vulnerability assessment, intrusion detection, penetration testing, incident response, and manual control procedures. 
Working knowledge of security systems associated with computing platforms, networking, operating systems and applications. 
Strong knowledge, experience or understanding of security policy or control frameworks and risk assessment tools.
Possesses conflict resolution and values of openness, honesty and respect.
Very strong analytical, planning, problem solving, organizational, project management skills and the ability to multi-task well.
Very strong interpersonal, oral and written communication skills, including the ability to communicate with all levels of organization and European HQ.
Ability to understand and manage complex technical and security problems that require attention to detail, timely resolution and a high degree of discretion.
Nice to have:
Experience with regulation of financial industry in Vietnam preferred.
CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager) or similar Information Security certifications preferred.

WHAT'S ON OFFER

Monthly allowance (600k)
13th-month Salary and performance- based KPI Bonus (1-3 months)
15+ Annual Leaves
Flexible time, Work-from-home policies 
Full Social Insurance, 24/7 Accidental Insurance, Annual Medical Check- up,Premium PTI 24/7 
Team Building and CSR activities: Year- end Party, New-year Party, Company trip, Charity activities, Blood donation
Learning workshops: Free Udemy E-learning, English courses, Senior management development training programs

CONTACT

PEGASI – IT Recruitment Consultancy | Email: recruit@pegasi.com.vn | Tel: +84 28 3622 8666
We are PEGASI – IT Recruitment Consultancy in Vietnam. If you are looking for new opportunity for your career path, kindly visit our website www.pegasi.com.vn for your reference. Thank you!

Job Summary

Company Type:

Product

Technical Skills:

Security

Location:

Ho Chi Minh - Viet Nam

Working Policy:

Job ID:

J01048

Status:

Close

Related Job:

Head of Engineering

Da Nang - Viet Nam

Product

Develop and communicate the engineering strategy, technical roadmap and priorities that align with product goals, customer outcomes and regulatory obligations. Assume responsibility for various aspects of the engineering process including discovery, estimation, architecture, development, testing, release, production support, incident response and continual improvement. Establish and build the engineering organisation by defining team structure and roles, participating in hiring, coaching and retaining engineers, and creating clear expectations and development paths. Lead internal engineers and oversee external engineering delivery partners to ensure agreed outcomes, quality standards, security requirements, and delivery commitments are met. Maintain a strong technical understanding to challenge designs, lead architecture and code reviews, resolve complex issues, and make informed decisions. Establish and enforce engineering standards for secure software development, code quality, automated testing, release management, and technical debt reduction. Assume responsibility for production reliability and operational readiness, including observability, capacity, availability, performance, incident management, and root-cause remediation. Integrate security and privacy into the engineering process, including encryption, auditability, secrets management, vulnerability remediation and data minimization. Collaborate with other teams to shape requirements, manage trade-offs, communicate risk and provide transparent delivery forecasts. Define measurable engineering objectives and own responsible AI adoption across various areas. Evaluate AI-enabled product opportunities and manage engineering suppliers and technology vendors. Contribute to budgeting, forecasting and prioritization, ensuring engineering expenditure produces measurable business value.

Negotiation

View details

Senior IT Product Manager (Business Workflow Platform)

Ho Chi Minh - Viet Nam

Outsource

  • Product Management

Develop a product vision, roadmap, and strategic direction for enterprise workflow platforms Prioritize and make investment decisions considering business value, scalability, risk, and operational efficiency Drive continuous improvement, innovation, and AI-native product transformation initiatives Stay abreast of market trends, emerging technologies, and enterprise workflow best practices Lead migration and modernization initiatives from legacy platforms to next-generation workflow solutions Collaborate with Product, Engineering, UX, and Architecture teams to deliver scalable enterprise capabilities Ensure high-quality product delivery through Agile product management and execution practices Foster operational excellence, standardization, and platform optimization Ensure service reliability, platform performance, SLA alignment, and operational stability Implement data-driven monitoring, analytics, and KPI tracking to support decision-making Support governance, security, compliance, and risk management activities Collaborate with stakeholders to ensure smooth adoption and change management Translate business requirements into clear and scalable technical and product specifications Provide leadership on software architecture, cloud technologies, workflow platforms, and AI-driven capabilities Manage communication, alignment, and engagement across global business and technology stakeholders Collaborate with strategic vendors and technology partners to ensure long-term product and service quality Promote an Agile mindset, collaboration, and iterative product delivery practices Empower cross-functional teams to deliver value and operate effectively Mentor teams and contribute to product management and operational best practices

Negotiation

View details

Senior AI DevSecOps Engineer

Ho Chi Minh - Viet Nam

Product

  • Devops
  • AWS
  • Azure
  • Security

Management of CI/CD Pipeline: Ensure automation, security, and scalability across all stages of the development lifecycle. Infrastructure & Security: Design and implement secure multi-cloud infrastructure solutions leveraging cloud services, containerization, and orchestration tools. Policy as Code: Define and enforce security and compliance policies across Kubernetes clusters using OPA or Kyverno, ensuring guardrails are automated and auditable. AI & Platform Automation: Drive the adoption of AI-powered tools and workflows to automate infrastructure operations, optimize CI/CD pipelines, accelerate root cause analysis, improve security posture, and enhance engineering productivity. Observability & Alerting: Build and maintain a comprehensive observability stack with proactive alerting, dashboards, and runbooks for critical business flows and security events. Secret & Credential Management: Design and enforce secrets management practices across all environments ensuring zero hardcoded credentials in codebases and pipelines. Incident Response & On-Call: Own and continuously improve incident response processes, define runbooks, lead post-mortems, track MTTR, and participate in on-call rotation to maintain platform reliability and SLO adherence. Threat Modelling & Penetration Testing: Conduct regular threat modelling sessions with engineering teams and coordinate or perform penetration testing activities to proactively identify attack surfaces before they reach production. Code Security: Conduct regular code reviews and static/dynamic analysis to identify and remediate security vulnerabilities. Compliance and Best Practices: Ensure compliance with industry standards and best practices. Collaboration: Collaborate with development, operations, and security teams to foster a culture of automation and security-first thinking. Mentorship: Mentor junior engineers and other team members on security best practices. Documentation: Maintain thorough and up-to-date documentation of security policies, procedures, and incident reports. Trend Scouting: Stay updated with the latest trends in technology and AI to integrate innovative solutions into our processes.

Negotiation

View details