Information Security Policy Engineer

Header Section

Viettel Enterprise Solutions General Company (VTS) is a subsidiary unit of Viettel Industrial - Telecommunications Group established with the mission to accompany the Government in successfully building a "Creative Government – Digital Government", cooperating with enterprises and people to solve social issues, bringing better lives to everyone. Viettel Enterprise Solutions General Company currently has a Research and Development Center that masters new technologies of the 4.0 industrial revolution (Big Data, AI, IoT, AR/VR, Cloud, Blockchain…) providing solutions for smart cities and digital transformation for enterprises, government, and organizations with directions such as connectivity, sharing and customer experience

Brief Description

Deploy centralized information security products and solutions; Deploy, train, and guide the implementation of Information Security Policy in practical application.

- Understand basic concepts of information security, basic principles of information security design.
- Understand basic common information security standards: ISO 27001
- Have the ability to select appropriate information security policies and regulations to apply in the organization
- Be able to develop information security documents under the guidance of experienced personnel.

- Research, analyze, identify, inspect, and evaluate information security for applications and infrastructure equipment to ensure information security before deployment and use.
- Research, analyze, develop solutions, policies, and evaluate information security for users and office networks to ensure information security for the unit's office.
- Proactively assess and identify information security vulnerabilities in the unit's application systems deployed internally or for customers.
- Advise, develop solutions, and implement information security solutions for systems.
- Conduct internal information security awareness training for new employees, guide information security programming for software development units.
- Communicate newly discovered information security vulnerabilities and conduct system reviews to identify vulnerabilities and provide timely remediation guidance.

- Advise the Department Head in developing information security strategy and policy at the General Company. Be responsible to the Department Head for information security work at the General Company
- Be responsible for managing personnel and directing common activities of the department.
- Organize work for each team member to implement and ensure information security work of the General Company or to achieve set objectives according to the Department Head's assignment.
- Guide team members in researching information security solutions to improve information security at the General Company
- Preside over establishing information security policies for the entire General Company.

Scope of Responsibilities

Develop information security policies and standards
- Support leadership in developing objectives, policies, and standards for ensuring information security according to international standards (ISO, NIST,...), Vietnamese legal regulations in the field of information security and network security; evaluate the quality of information security services provided by the unit;
Deploy and evaluate
- Deploy, train, and guide the implementation of Information Security Policy in practical application.
- Deploy centralized information security products and solutions.
- Monitor, control, and evaluate (audit) to ensure policies are applied in practice and promptly identify shortcomings for appropriate adjustments.

Skills

Requirements

- Bachelor's degree or higher, Good grade or above, in Information Security, Information Technology or related fields

- Have TOEIC certificate 650 points or equivalent international English certificates. Have a minimum of 3 years of experience working in an information security position.

- Understand basic concepts of information security, basic principles of information security design.
- Understand basic common information security standards: ISO 27001
- Have the ability to select appropriate information security policies and regulations to apply in the organization
- Be able to develop information security documents under the guidance of experienced personnel