Tuyển dụng Head of Security tại Hà Nội

Security Strategy & Risk Management:

• Develop the information security strategy and roadmap aligned with business objectives, group direction, and risk appetite.

• Proactively identify emerging security risks and vulnerabilities; assess business impacts and define appropriate mitigation plans and priorities.

• Establish security priorities and investment recommendations based on risk exposure and business needs.

Security Governance & Standardization

• Develop, standardize, and maintain information security policies, standards, procedures, and control frameworks.

• Establish clear security requirements, roles, responsibilities, and accountability to ensure consistent implementation across the organization.

• Ensure security governance aligns with applicable laws and regulations and recognized standards such as ISO/IEC 27001 and relevant data protection regulations.

Implementation Oversight & Compliance:

• Oversee the implementation and effectiveness of security policies and controls across IT infrastructure, applications, networks, endpoints, and cloud environments.

• Monitor compliance, conduct security assessments, and identify gaps between established standards and actual practices.

• Drive remediation plans, track implementation progress, and ensure relevant teams meet defined security requirements.

• Provide guidance and oversight to technical teams and stakeholders, ensuring security standards are effectively adopted and sustained rather than relying on ad hoc instructions or individual interventions.

Group HQ Coordination & Legal Compliance:

• Coordinate with Group HQ to implement, monitor, and operate group-wide security policies, standards, and initiatives at the company.

• Ensure compliance with group security requirements and applicable laws and regulations, including local Vietnamese regulations, and report implementation status to HQ.

Security Business & P&L:

• Own the P&L of the security services business, including revenue, margin, and growth targets.

• Develop the business strategy, service portfolio, and go-to-market plans for security consulting, SI, and SM services for group affiliates and external customers.

• Lead business development, presales, and key client relationships; ensure the quality, SLA, and profitability of delivered projects and services.

Team Leadership & Organization Building:

• Build, lead, and develop the security organization, including consulting, SI delivery, and SM operations teams.

• Define team structure, roles, and capability development plans; recruit and grow key talent.

• Establish an internal security governance function with an independent escalation path, separating compliance oversight from service delivery to avoid conflicts of interest.

Stakeholder Management & Continuous Improvement:

• Collaborate with business units, IT teams, management, and other stakeholders to embed security into business operations and technology initiatives.

• Report security risks, compliance status, roadmap progress, and business performance to management, providing recommendations for decision-making.

• Continuously improve the organization's security governance and maturity in response to evolving threats, business needs, and regulatory changes.

• Bachelor's degree in Informat

Yêu cầu công việc

• Bachelor's degree in Information Security, Cybersecurity, Computer Science, IT, or a related field.

• At least 15 years of experience in information security/cybersecurity, including at least 7–10 years in leadership roles managing multi-functional security teams (consulting, delivery, operations).

• Proven track record of P&L responsibility for a security services business.

• Proven ability to develop security policies, standards, and frameworks and drive their implementation across an organization.

• Strong expertise in security risk management, compliance, and security control assessment.

• Broad understanding of enterprise security domains, including IAM/PAM, network security, endpoint security, cloud security, and incident management.

• Strong strategic thinking, business acumen, stakeholder management, communication, and influencing skills.

• Experience working with group or regional headquarters is preferred.

• CISSP, CISM, CISA, or equivalent certifications are preferred.

Quyền lợi

• Khác: Premium Health InsuranceBirthday gift, Mid-Autumn gift, Tet holiday gift, Wedding / Funeral/ Give birth giftTraining at Lotte Innovate Korea for outstanding employees.