Expert, Information Security (40001096)

The job holder perform duties in designing, building, testing and implementing banking information security solutions.

o Proposing action plans related to security development activities

• Participate in proposing the annual action plans of the unit
• Participate in building/advising on the overall strategy of the unit

o In-depth research, propose solutions and techniques for activities:

• Research and develop information security measures and solutions: Network security, Endpoint security, Data security, Application Security
• Requirements development, security design, risk modeling, information security testing (source code review and testing), deployment of security controls.
• Develop advanced security testing standards and techniques
• Develop and apply secure programming standards, based on CWE/SANS top 25, OWASP
• Update, analyze vulnerabilities/weaknesses and assess effects on Techcombank in order to offer appropriate protection measures.
• Coordinate with the security monitoring và response department to analyze, and respond to attacks that affect the bank's operations. Apply security measures and solutions to effectively and thoroughly eliminate/prevent threats."

• Planning information security strategy:

o Participate in the development of information security strategy and annual strategic implementation plan according to assigned tasks

• Implement information security activities:

o Participate in the development of information security solutions for large, key projects involving many technology fields.
o Coordinate and providing in-depth skills to resolve security incidents
o Technical advice, training for other staffs
o Analyze trends in cyber warfare, risks and vulnerabilities to propose suitable testing strategies and prevention methods.
o Research new solutions and technologies to advise leaders in planning information security strategies.

Other missions:

• Participate in the implementation and/or support of technology projects
• Organize training, career development orientation for employees, foster and build human resources for the department.
• Perform other related tasks at the request of management levels.

Manager, Senior Manager, Information Security

Information security solutions/services companies, quick incident response organizations…etc.

Qualifications

• University degree in IT or electronics or telecommunications or related fields

Work Experience

• At least 08 years of working experience in information security management in financial / service / telecommunications organizations.
• Experience in planning information security / information technology strategy;
• Experience in research, design and implementation in the field of information security.

Other requirements

• Experience in Agile Product Development
• Business English requirements according to TCB's policy.