Cyber-Security Lead

Cyber-Security LeadAbout the JobThis is a technology company building scalable digital platforms and operational systems for global clients. We operate with a strong focus on product excellence, engineering quality, speed of execution, and operational clarity.
As we grow, so does our exposure - to system vulnerabilities, account and payment fraud, data breaches, and targeted attacks against our platforms. We are building a dedicated Cybersecurity function to test our defenses, close gaps, and keep our platforms and users safe.
As our Cybersecurity Lead/Manager, you will own security testing end to end - hands-on. You will run and coordinate testing across our web platforms, APIs, infrastructure, and cloud; and manage specialist external vendors. You will report directly to management and have real authority to set the security agenda.
Responsibilities
Set the security strategy and direction - what to prioritize, where to invest first, and what "secure enough" means for us.
Own the security roadmap and build out the function and team as we grow.
Run and coordinate security testing across web platforms, APIs, infrastructure, and cloud.
Build and maintain a complete asset inventory and risk register - know what we have and what's exposed.
Scope and manage external penetration testing and red team vendors, and turn their findings into tracked, closed-out fixes.
Test business logic and platform integrity - account takeover, payment and transaction abuse, bonus abuse, and game integrity.
Run phishing and social engineering testing and drive security awareness across teams.
Set up vulnerability management, monitoring, and incident response.
Advise engineering on secure development and review new features for security risk.
Report security risk and progress directly to management in clear, business-level terms.
Requirements
5+ years in cybersecurity, with strong hands-on penetration testing or security engineering experience.
Strong knowledge of web and API security (OWASP), network and infrastructure penetration testing, and cloud security (AWS).
Able to find business-logic flaws, not just run scanners.
Relevant experience in incident response.
Experience scoping and managing third-party security vendors.
Clear communicator - able to translate technical risk into management-level summaries.
High ownership mindset with strong attention to detail.
Communicates well in English.
Experience securing high-traffic consumer platforms with user accounts and online transactions is a strong plus.
Experience in gaming, fintech, or other real-money environments is a strong plus.
📌 Apply via: [protected info]
📩 Send your CV: [protected info]
📞 [protected info] - Ms. Nhàn