Information Security Team Lead - IT Department

Key Responsibilities:

• Lead and manage the IT Security and Risk Management Team, providing direction, mentorship, and support.

• Oversee the identification, assessment, and mitigation of IT risks, including threats to data, systems, and infrastructure.

• Ensure compliance with Regulatory Requirements, the Bank’s Procedures, Standards and Policies and Guidelines.

• Lead activities to ensure the same security framework and policies applied to the country infrastructure and systems of the bank.

• Educate and train all the branch's staff on information system security/cybersecurity best practices.

• Provide security requirements and conducting security test in System Development project

• Monitor and respond to security incidents, coordinate incident investigations, and ensure timely resolution and reporting.

• Conduct regular vulnerability assessments, penetration testing, and risk analyses; recommend and implement improvements.

• Manage security technologies and tools (e.g., firewalls, SIEM, endpoint protection, etc.), and oversee their effective operation.

• Stay current with emerging threats, technologies, and regulatory changes, and adjust strategies accordingly.

• Prepare and present security and risk reports to IT Head, Management and Region/HO

E

Yêu cầu công việc

Education & Experience:

• Bachelor’s degree in IT, or a related field.

• 5+ years of progressive experience in IT security and risk management, including leadership or managerial responsibilities.

• Proven experience in developing and implementing security programs, policies, and controls

Technical Skills:

• In-depth knowledge of cybersecurity principles, threat landscapes, and risk management frameworks.

• Hands-on experience with security technologies (SIEM, firewalls, IDS/IPS, endpoint protection, DLP, etc.).

• Strong understanding of IT infrastructure, cloud security, and application security.

• Familiarity with regulatory requirements and industry standards (ISO 27001, NIST, etc.).

• Experience with incident response, forensics, and vulnerability management.

Project & Leadership Skills:

• Demonstrated ability to lead and manage teams, projects, and cross-functional initiatives.

• Strong project management skills, including planning, execution, and reporting.

• Excellent communication and stakeholder engagement skills, including the ability to explain complex security topics to non-technical audiences.

• Strategic thinking and problem-solving abilities.

Soft Skills:

• Strong problem-solving and analytical skills, with the ability to think critically and act proactively.

• Effective communication and interpersonal skills for working with technical and non-technical stakeholders.

• Ability to manage multiple priorities and work independently under pressure.

• Customer service-oriented mindset.

• Willingness to learn and adapt to new technologies.

• Experience with monitoring and management tools.

• Strong documentation and reporting skills.

• Fluent in Vietnamese and English (both oral & written);

Certifications (Preferred):

• Certified Information Systems Security Professional (CISSP)

• Certified Information Security Manager (CISM)

• Certified Information Systems Auditor (CISA)

• ISO 27001 Lead Implementer or Auditor

• Other relevant security or risk management certifications

Quyền lợi

• Thưởng: 13th month salary
  Performance bonus
• Chăm sóc sức khoẻ: Health care insurance & accident insurance
• Nghỉ phép có lương: 16 days annual leave