• Year-end bonus based on company business and personal KPI achievement
• Compulsory insurance based on full salary recorded in labor contract
• Extra healthcare benefits applied at private hospital
• Annual health check
• Bonus on birthday, national day, funeral, wedding, giving birth,...
• >12 annual paid leave/year
• Training package on soft skills/professional knowledge
• Working environment: modern, friendly, open and high chance of promotion

• Create, execute, and maintain IT security strategy and medium/ long-term roadmaps
• Create, execute, and maintain security frameworks for both assurance and operation such as policies/standards, security architecture, risk and vulnerability management…
• Security design, analysis and consultancy
• Security solution evaluation, implementation, operation management and enhancement
• Manage security monitoring, incident response, and forensic
• IT and information risk management
• Development and management security awareness training and communication
• Security planning, budgeting, and project implementation/management
• Manage and seek opportunities to improve security services quality to customers
• Team management, performance review and development
• Other duties and tasks are assigned according to the production and business demand of the Company

Qualifications & Experience

• University or Master Degree in Computer Science - Mandatory
• Security/ Risk certification e.g CISSP, CISM - Preferred
• 05 years of experience with Security Management - Mandatory
• Experience in IT Governance, Security Risk and Compliance - Mandatory
• Experience in implementing IT security infrastructure and security management frameworks - Mandatory

Knowledge and Skills

• Solid knowledge on IT security functions such as operation, risk and vulnerability management, policy and standard creation and maintenance...
• Excellent analysis, troubleshooting, presentation and communication skills
• Excellent teamwork and time management skills
• Strong working knowledge of frameworks such as ISO 27001, ITIL, COBIT, and PCI DSS

Language

- Vietnamese/English (preferred)