Information Security Officer

The job holder needs to ensure that business operations comply with requirements on Information Security and standards (Shinhan Group, SBV, VN’s law,...)
Implement security improvements by assessing current situation, evaluating trends, and maintaining security controls.
Monitor security policies programs or procedures to ensure compliance with internal security policies, circulars from SBV and applicable government security requirements.
Determine security violations and inefficiencies by conducting periodic security audits to identify potential vulnerabilities related to physical security, staff safety and asset protection, ensure operational security controls implemented and maintained properly.
Defense system against unauthorized access, modification and/or destruction from daily internal and external threats by monitoring system health, performing system patches if necessary.
Perform vulnerability testing, risk analyses, assessments, and treatment plan, coordinate with related parties for consulting on remediation.
Train and establish awareness to employees on information risk and privacy-related obligations.
Ad-hoc tasks or projects from time to time assigned by Line manager/ Department Head/ Division Head.

1. Education Background
University graduated in IT or related
Certification of Information Security or IT Security is a plus
2. Experience
Experience in information security of financial service industry
Minimum of 2 years of experience related to IT Network/System
3. Knowledge
CompTIA Security
Information Risk awareness
Software development life cycle
4. Skills
Analyze IT specification to assess security risks
Monitoring network activities through by IDS/IPS/Sec system to identify issues early
Basic knowledge on computer networks, operating systems (Windows, Unix/Linux)
Negotiation, Communication
Time management
Teamwork & Motivation
Good collaboration
English communication intermediate (written & verbal)