The job holder needs to ensure that business operations comply with requirements on Information Security and standards (Shinhan Group, SBV, VN’s law,…)
• Develop, update, maintain and implement security measures and control.
• Analyze IT specification to assess security risks.
• Analyze the source of security breaches when it happens.
• Configuration and management of the security systems for Servers & endpoint (e.g. antivirus, DLP, NAC...)
• Configuration and management the network security system (e.g. firewall, proxy…)
• Configuration and management of the Centralized Log system (SIEM), SOC and Database Security Solution.
• Perform Penetration testing and Security assessments for IT systems.
• Monitoring network activities through IDS/IPS/WAF system to identify issues early.
• Train and establish awareness to employees on information risk and privacy-related obligations.
• Ad-hoc tasks or projects from time to time assigned by Line manager/Department Heads/Division Head.
1. Qualification
• Bachelor’s degree in Information Technology, Information Security, Computer Science, or a related field.
• Certification of Information Security or IT Security is a plus
2. Experience
• Experience in information security of financial service industry
• Minimum of 5 years of experience related to IT Network/System
3. Knowledge
• CEH, CISA, ITIL
• Global privacy laws (GDPR, APEC Data Privacy frameworks…)
4. Skills
• Analyze the source of security breaches when it happens.
• Configuration and management the network security system (e.g. Firewall, Proxy, Antivirus, DLP …)
• Advanced knowledge on computer networks, window operating systems, Unix/Linux operating systems.
• Have knowledge of operating centralized Log system, SOC and Database firewall.
• Know how to use Security assessment and source code tools.
• Teamwork & Motivation skills
• Good collaboration skill
• Problem solving skill
• Effective communication skill.
