Head of IT Security

JOB DESCRIPTION

Objective
Develops, implements, and maintains an effective information security program to ensure the protection of the our Client's information and computing resources.
Key responsibilities/duties:
lEnsures confidentiality, integrity, and availability of Home credit information and computing systems by managing the planning, implementation, and enhancement of the Bank's Information Security assurance program.
lServes as a project manager or provides project oversight for Information Security related projects.
lManages technically skilled individuals by performing normal management functions of staffing, planning, controlling, and directing; reviewing and evaluating performance; reviewing employment candidates; recommending salary increases and promotions for the Information Security group; and preparing budget for area of supervision.
lAccommodates the Home credit automation objectives and development of Home credit policies on information security by developing strategic, tactical and operational information security plans.
lDevelops and administers internal information security assurance, standards and procedures.
lProvides oversight for all Information Security related incidents and investigations.
lProvides Security Consulting Services Bank Management and Business functions as needed in a manner that is consistent with the risk framework identified by the Home credit System Information Security policy.
lContributes to and participates Home credit Operational Risk Management.
lServes as a central point of contact with staff and Internal Audit department, and external audit functions for consultation on information security issues, controls and compliance .
lOversees the implementation of information security awareness programs for Home credit's staff.
lEnsures that safety rules and regulations are adhered to by personnel in area, and performs job duties and responsibilities in conformance with sound safety practices.

JOB REQUIREMENT

Fluent English and Vietnamese – spoken & written
Bachelor's degree or equivalent experience.
Minimum of five years work experience directly in the information security field.
Minimum of three years management or similar leadership experience.
Excellent risk management, enterprise defense, consulting and external "threat awareness" competencies.
Strong knowledge of various automated security control systems, encryption, message authentication, vulnerability assessment, intrusion detection, penetration testing, incident response, and manual control procedures. 
Working knowledge of security systems associated with computing platforms, networking, operating systems and applications. 
Strong knowledge, experience or understanding of security policy or control frameworks and risk assessment tools.
Possesses conflict resolution and values of openness, honesty and respect.
Very strong analytical, planning, problem solving, organizational, project management skills and the ability to multi-task well.
Very strong interpersonal, oral and written communication skills, including the ability to communicate with all levels of organization and European HQ.
Ability to understand and manage complex technical and security problems that require attention to detail, timely resolution and a high degree of discretion.
Nice to have:
Experience with regulation of financial industry in Vietnam preferred.
CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager) or similar Information Security certifications preferred.

WHAT'S ON OFFER

Monthly allowance (600k)
13th-month Salary and performance- based KPI Bonus (1-3 months)
15+ Annual Leaves
Flexible time, Work-from-home policies 
Full Social Insurance, 24/7 Accidental Insurance, Annual Medical Check- up,Premium PTI 24/7 
Team Building and CSR activities: Year- end Party, New-year Party, Company trip, Charity activities, Blood donation
Learning workshops: Free Udemy E-learning, English courses, Senior management development training programs

CONTACT

PEGASI – IT Recruitment Consultancy | Email: recruit@pegasi.com.vn | Tel: +84 28 3622 8666
We are PEGASI – IT Recruitment Consultancy in Vietnam. If you are looking for new opportunity for your career path, kindly visit our website www.pegasi.com.vn for your reference. Thank you!

Job Summary

Company Type:

Product

Technical Skills:

Security

Location:

Ho Chi Minh - Viet Nam

Working Policy:

Job ID:

J01048

Status:

Close

Related Job:

Recruitment Consultant (IT, All Levels)

Ho Chi Minh - Viet Nam

Recruiting & Payroll services, Human Resource Services

Promoting & building awareness of Pegasi's capabilities to clients and candidates Identifying client requirements with Customer Solutions Department Searching and building up candidate database Calling, meeting, and following up with candidates to utilize their skills and build a long-term relationship Consulting and introducing suitable opportunities offered by the clients to candidates Managing the process through getting vacancies, interviewing to the offer stage, and beyond Networking to build business information that can be converted into commercial opportunities Mentoring the juniors and newcomers when needed Participating in side projects/tasks to improve the organization continuously Other tasks are assigned by the line manager and company

Negotiation

View details

Head of AI Factory

Ha Noi - Viet Nam

Product, Bank

  • AI

Develop and execute enterprise-wide data science and AI strategy that aligns with business priorities. Provide guidance to C-level executives on leveraging data for business growth, risk mitigation, and operational efficiency. Promote the use of AI best practices among subsidiary companies. Lead the development of Predictive AI, including data and feature engineering, and model lifecycle management. Spearhead Generative AI initiatives, such as prompt frameworks, knowledge integration, and safety protocols. Assess and implement model solutions based on business, cost, risk, and performance considerations. Manage MLOps & LLMOps pipelines to ensure scalable deployment and automation for predictive and generative models. Create reusable AI assets and platforms, such as feature stores, model registries, and inference APIs. Work with IT and Data Architecture teams to create scalable data platforms, pipelines, and AI/ML infrastructure for both ML & GenAI, supporting both batch and real-time flow. Drive experimentation and research to keep up with practical emerging AI technologies. Establish ethical AI practices and ensure compliance with data privacy, regulatory, and security requirements. Collaborate with business units to advise on the application of AI/GenAI for business. Work with business and product owners to define problem statements, estimate value, build ROI models, and measure post-deployment outcomes. Provide leadership and management to enable subordinates to achieve AI Factory goals. Plan and allocate human resources and work with HR on recruitment, training, career development, and performance management. Develop talent and organizational capability in AI/GenAI, providing coaching and leadership to team members. Serve as a role model in building corporate culture and ensure consistent implementation of corporate cultural values.

Negotiation

View details

Senior Information Security Officer (Security Control & Compliance)

Ho Chi Minh - Viet Nam

Product

  • Security

Implementing and operating application security solutions such as WAF, DDoS protection, and PAM (Privileged Access Management). Monitoring privileged access activities, detecting abnormal behavior, and escalating security risks. Collaborating with development and infrastructure teams to embed security measures across the application lifecycle (SDLC/DevSecOps). Supporting application vulnerability assessment activities and tracking remediation progress. Supporting the development, maintenance, and updates of information security policies and procedures. Ensuring compliance with internal security standards and external regulatory requirements, and preparing documentation and reports for internal and external audits. Monitoring application-related security events and access activities, analyzing and reporting security risks, vulnerabilities, and incidents to management. Tracking the remediation status of identified security issues and ensuring timely resolution. Supporting the execution of information security awareness programs for employees and assisting in developing related training materials and communication. Participating in the research, testing, and deployment of new application security solutions, and supporting security-related initiatives in digital transformation and system upgrade projects. Contributing to security requirement definition in IT and business projects.

Negotiation

View details