Senior Information Security Officer (Security Control & Compliance)

ABOUT CLIENT

Our client is a leading financial services company in Vietnam

JOB DESCRIPTION

Implementing and operating application security solutions such as WAF, DDoS protection, and PAM (Privileged Access Management).
Monitoring privileged access activities, detecting abnormal behavior, and escalating security risks.
Collaborating with development and infrastructure teams to embed security measures across the application lifecycle (SDLC/DevSecOps).
Supporting application vulnerability assessment activities and tracking remediation progress.
Supporting the development, maintenance, and updates of information security policies and procedures.
Ensuring compliance with internal security standards and external regulatory requirements, and preparing documentation and reports for internal and external audits.
Monitoring application-related security events and access activities, analyzing and reporting security risks, vulnerabilities, and incidents to management.
Tracking the remediation status of identified security issues and ensuring timely resolution.
Supporting the execution of information security awareness programs for employees and assisting in developing related training materials and communication.
Participating in the research, testing, and deployment of new application security solutions, and supporting security-related initiatives in digital transformation and system upgrade projects.
Contributing to security requirement definition in IT and business projects.

JOB REQUIREMENT

Proficiency in web application security and OWASP Top 10.
Familiarity with security tools like WAF, PAM, DDoS protection, SIEM is beneficial.
Understanding of SDLC/DevSecOps processes.
Knowledge of information security standards such as ISO 27001, NIST, CIS, and compliance frameworks.
Strong analytical and problem-solving skills in dealing with security incidents and vulnerabilities.
Ability to collaborate with cross-functional teams.
Proficient in reporting and documentation with strong logical thinking.
Bachelor's degree in Information Technology, Computer Science, Information Security, or related fields.
2-5 years of experience in Application Security, Information Security, or IT Security roles.
Preference for certifications in Application Security (CEH, eWPT, eJPT, BSCP or equivalent).
ISO/IEC 27001 Lead Implementer/Lead Auditor or CISA qualifications.
SC-300 (Identity & Access Management) certification or IAM/PAM experience.
Experience in banking, securities, fintech, or regulated financial environments is a plus.

WHAT'S ON OFFER

CONTACT

PEGASI – IT Recruitment Consultancy | Email: recruit@pegasi.com.vn | Tel: +84 28 3622 8666
We are PEGASI – IT Recruitment Consultancy in Vietnam. If you are looking for new opportunity for your career path, kindly visit our website www.pegasi.com.vn for your reference. Thank you!

Job Summary

Company Type:

Product

Technical Skills:

Security

Location:

Ho Chi Minh - Viet Nam

Working Policy:

Onsite

Job ID:

J02144

Status:

Active

Related Job:

Lead Penetration Tester

Ho Chi Minh, Ha Noi - Viet Nam

Outsource

  • Security

Conduct authorized penetration testing for various digital platforms, including web applications, mobile applications, APIs, infrastructure, and cloud environments. Identify and document security vulnerabilities, validate and exploit when necessary, covering areas such as authentication, authorization, session management, input validation, encryption, access control, and business logic issues. Perform security assessments according to industry standards (e.g. OWASP Top 10, OWASP API Security Top 10, OWASP Mobile Security Testing Guide) and relevant security practices. Analyze application flows, user journeys, transaction processes, access controls, and data handling mechanisms to uncover potential security risks. Conduct vulnerability assessment and manual verification to reduce false positives, confirming actual exploitability in authorized environments. Retest to validate remediation effectiveness and ensure vulnerabilities are properly resolved. Support security testing activities within the software development life cycle (SDLC), including security requirement review, threat analysis, test planning, and release security validation. Stay updated with emerging cyber threats, attack techniques, security risks, and security testing best practices. Lead the planning, scoping, and execution of penetration testing activities across assigned projects. Define the penetration testing approach, test strategy, testing scope, priorities, timelines, and required evidence based on project and client requirements. Guide and mentor penetration testers or security engineers in testing methodology, vulnerability validation, reporting quality, and remediation discussions. Review vulnerability findings, risk ratings, evidence, and remediation recommendations to ensure accuracy, consistency, and practical value. Serve as the main technical point of contact for penetration testing activities, working with client stakeholders, security teams, development teams, DevOps, infrastructure teams, and compliance teams. Facilitate vulnerability walkthroughs, risk clarification sessions, remediation discussions, and retesting alignment with relevant stakeholders. Support estimation, planning, status tracking, issue escalation, and delivery reporting for security testing activities. Contribute to improving security testing processes, reporting templates, testing checklists, knowledge sharing, and reusable testing practices. Support regulatory, audit, and compliance requirements by providing security testing evidence, reports, remediation status, and technical clarification when needed.

Negotiation

View details

Senior Embedded Linux Middleware Engineer

Ho Chi Minh - Viet Nam

Outsource

  • Embedded
  • C/C++

Create middleware/framework for SoC platforms. Conduct Integration Testing, Unit Testing, Functional Testing. Generate technical documentation and build sample applications for the product. Work with various teams to ensure project completion. Recognize, report, and resolve technical issues.

Negotiation

View details

Senior Quality Engineer (Automation, Backend)

Ho Chi Minh - Viet Nam

Product

  • Automation Test
  • Python

Lead test automation strategy and framework design for backend and cloud-based services. Drive end-to-end test automation initiatives using Cypress to ensure seamless user experiences. Perform thorough manual testing for complex workflows requiring deep attention to UX and usability details. Implement continuous integration and deployment test practices such as GitHub Actions and Jenkins. Collaborate with developers and DevOps to enhance test reliability and coverage. Review code and advocate for QA best practices across teams. Identify quality risks early and actively seek solutions. Ensure release compliance through test result reporting.

Negotiation

View details