CVCC Bảo mật CNTT - TA192

1. Vulnerability assessment and penetration testing program and responsible for the design and performance of application security robustness tests.

• Deliver the annual penetration testing schedule and conducting awareness campaigns to ensure proper budgeting by business lines for annual tests
• Operate a hands-on role involving penetration testing and vulnerability assessment activities of complex applications, operating systems, wired and wireless networks, and mobile applications/devices
• Automate penetration and other security testing on networks, systems and applications
• Consult with application developers, systems administrators, and management to demonstrate security testing results, explain the threat presented by the results, and consult on remediation
• Communicate security issues to a wide variety of internal and external “customers” to include technical teams, executives, risk groups, vendors and regulators
• Trial attacks & incident response
• Research/develop new security standards/technique guidle and apply to bank
• Operate security technologies, control security changes/ensuring the safety of information technology systems

2.Implement security program to security development

Participation with key technicque in security projects, security solutions requires a very high of expertise skill

3. Develop/implement/apply security by design to Projects

• Develop/implement/trainning/apply security by design framework to Bank
• Security controls end to end for projects/CR make sure new services & system is safe before golive
• Supporting Vendor Security activities to ensure 3rd‐party software and development meets Bank security standards.