Senior Manager IT Security Engineer

JOB DESCRIPTION

PURPOSE
Drive the Company's IT Security Engineering function as a SME for the Company and all Business Units (10 Business Units) in Asia Pacific.
Define and partner with stakeholders in a multi-disciplined team structure, designing and implementing cloud security solutions to provide coverage across a variety of projects
Lead stakeholders' and vendors engagements and providing subject matter expertise to Business Units and engagement teams
Develop deep working relationships with senior executives across engagement teams.
Responsible and execute large-scale project deliveries
Manage teams and mentor junior resources
Oversee infrastructure and microservices security architecture (inclusive of: container security architecture, data security architecture, network security architecture and operational security architecture).
Review the infrastructure and microservices design against different security regulatory, industry and internal standards such as PCI DSSand CSA Containers' security guidelines and identifying the necessary security architecture requirements for the same.
Review the infrastructure and microservices network and data architecture and identifying the necessary security architecture requirements for the same.
Ensure that final design addresses identified threats and countermeasures during threat modelling.
Build knowledge capital through research and development and leveraging industry insights to deliver best of breed expertise to stakeholders.
Lead the growth of cloud security practice across business units, project team and other stakeholders.
Drive IT Security Engineering Initiatives and Projects definition and implementation, selection of solutions and architecture, as well as define operations framework and its continuous improvement.
KEY ACCOUNTABILITIES
Support the Head of IT Security Engineering in define and maintainthe IT Security Engineering framework for the Company.
Drive awareness and support to Group IT Security, Group IT and Business Units IT, to understand the IT Security Solutions and Processes, as well as their implications across the organization.
Drive IT Security Engineering Initiatives and Projects definition and implementation, selection of solutions and architecture, as well as define operations framework and its continuous improvement.
Partner with the Head of IT Security Engineering and Group CISO, through tracking and reporting function, to ensure regular updates to management on the IT Security Engineering Program and risks.
KEY PERFORMANCE INDICATORS
On Time on Budget delivery ofkey IT Security Engineering Program uplifts or deployments, aligned with Group IT Security roadmap.
Support the Head of IT Security Engineering in continuous uplift of the IT Security Engineering program.
Ensure IT Security Engineering Program across Business Units is carried out in alignment with the Company's business objectives and defined IT Security Plan timelines.
Group IT Security Engineering Security Framework implementation and controls are delivered in a cost-effective way using processes and resources (including people andtechnologies) aligned with the Company's business goals.
Group IT Security Engineering support and governance are provided for all Business Units.
IT Security Engineering Program awareness is conducted when necessary.
Doing things right, creating synergies for the overall the Company's goals and objectives, along with a people first approach.
EXTERNAL & INTERNALCONTACTS
Head of IT Security Engineering
Group CISO
Business Units IT SecurityTeams
Group and Business Units Chief of Technology and Operations
Group and Business Units IT & Operations
Group and Business UnitsInternal Audit
External Auditors
Vendors and/or Service Providers

JOB REQUIREMENT

QUALIFICATIONS / EXPERIENCE
Minimum 8 years working experience in IT Security Management role, preferably in Financial Services.
Regional experience in IT Security Technical or Engineering roles.
Degree from Information Technology or equivalent discipline.
Technical experience in Identify, Protect, Detect, Response or Recover areas.
KNOWLEDGE & TECHNICALSKILLS
Cloud security-related certifications such as Certified Information Systems Security Professional (CISSP), Certified Cloud SecurityProfessional (CCSP), or any cloud provider-specific security certifications.
A robust grasp of cloud security best practices, principles, and patterns. This should include knowledge of the Shared Responsibility Model and an understanding of how it impacts security posture.
In-depth knowledge of at least one major cloud service provider (e.g., AWS, Azure, GCP) with a comprehensive understanding of their service offerings, architecture, and security controls.
Experience with scripting and automation tools to streamline security operations.
Knowledge of vulnerability scanning tools and techniques, as well as experience with there mediation of identified vulnerabilities.
Knowledge of cloud networking constructs, security groups, network ACLs, and other network security methodologies.
Excellent interpersonal and influential skills to enable the implementation and enforcement of the IT Security Engineering program.
Good communication and presentation skills.

WHAT'S ON OFFER

13th salary
Bonus paid in April next year if joining before Oct 2024
Paid leave up to 22 days per year (prorated for partially joining)
Work remote 1 day per week
Health insurance for employees and direct dependents

CONTACT

PEGASI – IT Recruitment Consultancy | Email: recruit@pegasi.com.vn | Tel: +84 28 3622 8666
We are PEGASI – IT Recruitment Consultancy in Vietnam. If you are looking for new opportunity for your career path, kindly visit our website www.pegasi.com.vn for your reference. Thank you!

Job Summary

Company Type:

Product

Technical Skills:

Security

Location:

Ho Chi Minh - Viet Nam

Working Policy:

Job ID:

J01572

Status:

Close

Related Job:

Junior Embedded Linux Middleware Engineer

Ho Chi Minh - Viet Nam

Outsource

  • Embedded
  • C/C++

Responsible for designing, developing, and testing middleware/framework for SoC platforms. Conduct Integration Testing, Unit Testing, and Functional Testing. Create technical documentation and develop sample applications for the product. Work closely with various teams to ensure successful project delivery. Identify, report, and resolve technical issues.

Negotiation

View details

Lead Penetration Tester

Ho Chi Minh, Ha Noi - Viet Nam

Outsource

  • Security

Conduct authorized penetration testing for various digital platforms, including web applications, mobile applications, APIs, infrastructure, and cloud environments. Identify and document security vulnerabilities, validate and exploit when necessary, covering areas such as authentication, authorization, session management, input validation, encryption, access control, and business logic issues. Perform security assessments according to industry standards (e.g. OWASP Top 10, OWASP API Security Top 10, OWASP Mobile Security Testing Guide) and relevant security practices. Analyze application flows, user journeys, transaction processes, access controls, and data handling mechanisms to uncover potential security risks. Conduct vulnerability assessment and manual verification to reduce false positives, confirming actual exploitability in authorized environments. Retest to validate remediation effectiveness and ensure vulnerabilities are properly resolved. Support security testing activities within the software development life cycle (SDLC), including security requirement review, threat analysis, test planning, and release security validation. Stay updated with emerging cyber threats, attack techniques, security risks, and security testing best practices. Lead the planning, scoping, and execution of penetration testing activities across assigned projects. Define the penetration testing approach, test strategy, testing scope, priorities, timelines, and required evidence based on project and client requirements. Guide and mentor penetration testers or security engineers in testing methodology, vulnerability validation, reporting quality, and remediation discussions. Review vulnerability findings, risk ratings, evidence, and remediation recommendations to ensure accuracy, consistency, and practical value. Serve as the main technical point of contact for penetration testing activities, working with client stakeholders, security teams, development teams, DevOps, infrastructure teams, and compliance teams. Facilitate vulnerability walkthroughs, risk clarification sessions, remediation discussions, and retesting alignment with relevant stakeholders. Support estimation, planning, status tracking, issue escalation, and delivery reporting for security testing activities. Contribute to improving security testing processes, reporting templates, testing checklists, knowledge sharing, and reusable testing practices. Support regulatory, audit, and compliance requirements by providing security testing evidence, reports, remediation status, and technical clarification when needed.

Negotiation

View details

(JTL) Delivery Manager

Ho Chi Minh - Viet Nam

Outsource

  • Project Management

Oversee the leadership, mentoring and development of two engineering teams, namely AI BI and AI-Powered Service Desk. This includes managing recruitment, evaluating performance, and facilitating career growth. Take accountability for the delivery of both teams, comprising planning, prioritization, sprint execution, and ensuring high-quality releases. Work in conjunction with Product, Data Science/ML, and Design to establish roadmaps and convert business requirements into technical implementation. Offer technical direction and architectural oversight across BI dashboards, analytics pipelines, and AI-powered service/support tooling. Advocate for engineering best practices such as code quality, testing, CI/CD, observability, and documentation. Manage competing priorities across both teams, resolve obstacles for engineers, and oversee inter-team dependencies. Collaborate with backend, frontend, and ML engineers to ensure unified architecture across the teams. Provide regular reports on team performance, progress in delivery, and potential risks to senior leadership. Cultivate an environment focused on accountability, collaboration, and continual enhancement. Remain involved in hands-on tasks as required, including code reviews, architecture discussions, and making technical decisions.

Negotiation

View details