Head of Infrastructure and Information Security

JOB DESCRIPTION

Job Purpose/Role
As our company, the role is primarily responsible for providing local and regional services while managing some central services capabilities in the functional domains of network, data centre, workplace, security and IT services to client OE's. The person directs the BAU of infrastructure and security services in the local entity and those transferred under GIST covering both the life and general insurance entities
Key responsibilities/What you do
Ensure the IT services and projects delivery to Company internal and external customers both regional and global level.
Act as strategic decision maker and lead the resolution of critical infrastructure and security incidents and issues on behalf of the local entity to secure the seamless business continuity.
Build the long-term partnerships of trust by providing the expertise in infrastructure and security as services to Company internal and external customers.
Initiate the strategic roadmap for both service and project transformation in line with Group and local business strategy.
Provide IT leadership locally to company and support the local board towards company's goals.
Drive and encourage continuous service improvement and provide governance to local IT operations to ensure the compliance with the regulator and the internal audit.
Represent the local escalation point for the major changes, problems and incidents and proceed further steps for resolution
Stewardship the financial control of the P&L in the areas of Infrastructure and security for Company
Develop and direct the local resource capabilities enabling to response to business strategy
Manage Company' contracts and vendors relationships to ensure the competive adventage to Company.

JOB REQUIREMENT

10+ years of IT industry experience
Previous experience of leading engineering teams 20+ staff
University degree with specialism in Information Technology preferred
ITIL certification preferred
AWS or Azure certification preferred
Windows or Linux certifications preferred
Database and middleware qualifications preferred
Project management qualifications a bonus
Experience working in large multinational corporations
Proven examples of delivering infrastructure transformation
Understanding of agile ways of working
Developed customer/executive skills
Demonstrated ability to handle multiple initiatives at the same time.
Have strong leadership skills to lead a large engineer team and team managers
Have a strong understanding of cloud services both public and private.
Have a strong understand of traditional datacentre operations, virtualisation platforms and operating system platforms of Linux and Windows
Good understanding of active directory and IT security
A reasonable understanding of database technologies and middleware platforms
Have a reasonable understanding of Devops capabilities and tool chain
Experience with traditional databases, middleware platforms and cloud enabled platforms
English (highly proficient) - The role will require daily communication with management colleagues throughout APAC region.

WHAT'S ON OFFER

We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad
We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location)
From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered
Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach

CONTACT

PEGASI – IT Recruitment Consultancy | Email: recruit@pegasi.com.vn | Tel: +84 28 3622 8666
We are PEGASI – IT Recruitment Consultancy in Vietnam. If you are looking for new opportunity for your career path, kindly visit our website www.pegasi.com.vn for your reference. Thank you!

Job Summary

Company Type:

Outsource

Technical Skills:

System, Azure, AWS

Location:

Others - Thailand

Working Policy:

Job ID:

J01242

Status:

Close

Related Job:

Senior Backend Engineer (Shop 6.0)

Ho Chi Minh - Viet Nam


Outsource

  • NodeJS
  • Azure

Design and develop the backend services for the core areas of Shop 6.0 (catalog, orders, payments, ERP Cloud integration) Define API boundaries and ensure consistent, scalable communication between services Own reliable data synchronization between the ERP Cloud and the platform, including error handling and recovery mechanisms Optimize systems for performance and scalability (caching, asynchronous processing, read/write optimization) Establish observability standards (logging, monitoring, alerting) across all backend services Conduct code reviews, promote best practices, and support less experienced team members

Negotiation

View details

Senior Tech Lead (Shop 6.0)

Ho Chi Minh - Viet Nam


Outsource

  • Backend
  • Frontend
  • Azure

Take on overall technical and organizational responsibility for delivering Shop 6.0 across frontend, backend, and infrastructure Plan delivery scope, milestones, and releases, and coordinate the work of parallel workstreams (frontend, backend, DevOps, QA) Make and facilitate key architectural decisions together with the senior engineers, particularly around microservices, APIs, and cloud-native implementation on Azure Identify and manage risks related to integration (especially the ERP Cloud connection), scalability, and technical dependencies Serve as the central point of contact for stakeholders on scope, prioritization, and timelines Ensure code quality through reviews, mentoring, and clear standards, including a pull request process with mandatory checks and senior/lead review Ensure transparency on progress, risks, and decisions towards the team and management

Negotiation

View details

Lead Penetration Tester

Ho Chi Minh, Ha Noi - Viet Nam


Outsource

  • Security

Conduct authorized penetration testing for various digital platforms, including web applications, mobile applications, APIs, infrastructure, and cloud environments. Identify and document security vulnerabilities, validate and exploit when necessary, covering areas such as authentication, authorization, session management, input validation, encryption, access control, and business logic issues. Perform security assessments according to industry standards (e.g. OWASP Top 10, OWASP API Security Top 10, OWASP Mobile Security Testing Guide) and relevant security practices. Analyze application flows, user journeys, transaction processes, access controls, and data handling mechanisms to uncover potential security risks. Conduct vulnerability assessment and manual verification to reduce false positives, confirming actual exploitability in authorized environments. Retest to validate remediation effectiveness and ensure vulnerabilities are properly resolved. Support security testing activities within the software development life cycle (SDLC), including security requirement review, threat analysis, test planning, and release security validation. Stay updated with emerging cyber threats, attack techniques, security risks, and security testing best practices. Lead the planning, scoping, and execution of penetration testing activities across assigned projects. Define the penetration testing approach, test strategy, testing scope, priorities, timelines, and required evidence based on project and client requirements. Guide and mentor penetration testers or security engineers in testing methodology, vulnerability validation, reporting quality, and remediation discussions. Review vulnerability findings, risk ratings, evidence, and remediation recommendations to ensure accuracy, consistency, and practical value. Serve as the main technical point of contact for penetration testing activities, working with client stakeholders, security teams, development teams, DevOps, infrastructure teams, and compliance teams. Facilitate vulnerability walkthroughs, risk clarification sessions, remediation discussions, and retesting alignment with relevant stakeholders. Support estimation, planning, status tracking, issue escalation, and delivery reporting for security testing activities. Contribute to improving security testing processes, reporting templates, testing checklists, knowledge sharing, and reusable testing practices. Support regulatory, audit, and compliance requirements by providing security testing evidence, reports, remediation status, and technical clarification when needed.

Negotiation

View details