Cyber Security EngineerCÔNG TY TÀI CHÍNH TNHH MTV LOTTE VIỆT NAM - LOTTE FINANCE

I. Compliance:
Co-ordinate with other teams (BP, HR) to develop internal compliance procedures, framework, aligned to LOTTE GROUP's requirements and provide training to internal stakeholders.
Advise management on potential risks and recommend solutions to ensure compliance and enhance the efficiency and effectiveness of Lotte Innovate's operation
Ensure that third party risks are managed
Conduct regular internal audits to ensure compliance with regulations and internal policies
Conduct non-compliant incidents inspection or collaborate with other stakeholders to conduct the inspection
Ensure that the Awareness program is implemented effectively.
Review and update the Awareness program to ensure relevancy to the current cybersecurity threats.
II. Operation:
Involve with a team to establish policy on a security solution that applies to LIVNC
Produce cybersecurity requirements for all systems to protect and reduce the cybersecurity risk
Control approves the request/changes related to security, control activities of IT security: implementing, operating, vulnerabilities management
Analyzing potential threats to existing applications and infrastructure, including malicious code such as viruses or worms, unauthorized access attempts, and denial of service attacks
Conducting penetration tests to identify vulnerabilities in security protocols
Ensure all Cybersecurity Risk are recorded, tracked and addressed in the agreed timeline
Providing regular reports on security measures and any breaches or vulnerabilities to management
Collect, analyze and produce report for IT Security every month
Work with both internal/external audit during regular annual security checking for LOTTE
III. Consultant:
Researching,Implementing, Operating, Upgrading and Management security measures as: SIEM, Antivirus, EDR/XDR, IPS/IDS, Vulnerability assessment, PIM/PAM, WAF, DDOS, encryption technologies, and password protection [protected info] the protection of customers's data, systems, and networks (include LIVNC's IDC)
Participate in the incident response process in case of customers require
Collaborate with Sales team in order to make proposal to enhance security performance of Lotte subsidiaries
Writting proposals for selected products, technical solutions, demo, PoC
Training and transferring technology to customers.
Report toManager issues related to projects, contracts, work ofteam and the company.