Objective
Participate in implementing information security management activities as assigned by the Director of Information Security Management
Key accountabilities
1. Responsible for implementing and reporting information security management activities as assigned by the Director of Information Security Management, including:
- Develop/adjust and implement Business Continuity Plans (BCP) for systems.
- Develop requirements and measures to control access and protect bank data.
- Develop, maintain, and optimize information security policies/rules/configurations for information security solutions such as: Information security solutions for identity and access management (PAM, IAM…); Information security solutions for networks (Firewall, NAC, APT, NetIPS, DDOS…); Information security solutions for endpoints (AD GPO, HIPS/HFW, Appcontrol, Web/mail filtering, DB security…); Information security solutions for data (DLP, FAM…).
- Review, assess, and audit:
+ Implementation of access control to ensure compliance with the access control matrix.
+ Allocation, revocation of privileged accounts and digital certificates on technology systems.
+ Exception requests related to identity and access on technology systems.
+ Change requests on information security solutions.
2. Risk management and compliance
- Identify risks in the department's operations, ensure compliance with bank procedures and regulations. Coordinate with relevant units to handle risks.
- Implement risk management activities according to reports from internal/external audit departments of the Bank.
Success Profile - Qualification and Experiences
1. Bachelor's degree in Information Technology, Electronics and Telecommunications, or related fields
2. Experience in deploying, managing, and operating in-depth information security policies, rules, and configurations in at least one of the following areas at financial/service/telecommunications organizations (4-5 years):
+ Information security solutions for identity and access management (PAM, IAM…);
+ Information security solutions for networks (Firewall, NAC, APT, NetIPS, DDOS…);
+ Information security solutions for endpoints (AD GPO, HIPS/HFW, Appcontrol, Web/mail filtering, DB security…);
+ Information security solutions for data (DLP, FAM…).
3. Foreign language: Level 1 or above – TOEIC below 550
4. Certifications in information security from providers of information security solutions such as Microsoft/Cisco/PaloAlto/Checkpoint…