Expert, Data Security and Privacy (IT Risk / IT Audit Based)

A. JOB PURPOSE:
- The job holder participates in definition of the security architecture, ensure that it meets the business requirements and performance goals.
- The job holder identifies vulnerabilities and work with the research, engineering and technical client success departments to resolve them and ensure that our network and data remain secure.
B. KEY RESPONSIBILITIES:
Data Privacy and Security
- Contribute his/her expertise with team to define different levels of access to data and who has authorized access to data to ensure only the right people have access to the right data.
- Establish, monitor and enforce processes and procedures to govern how data is collected, shared and used follow proper internal and external compliance requirements.
- Ensure Data processes are properly documented.
- Manage access to sensitive and regulated data and secure data against unauthorized access
- Monitor and detect suspicious behavior on sensitive data.
- Actively enhance processes, systems to identify and track who is accessing data, highlight unusual activity and report on odd behavior that's regulated and sensitive.
- Guide team to provide expert advice and guidance across the business/divisions in relation to data privacy and associated matters.
- Audit, control and monitor Bank compliance with applicable Regulations (GDPR, GLBA, FFIEC, Vietnam cyber law etc.)
Projects Management
- Manage project conflicts, challenges and dynamic business requirements to keep operations running at high performance.
- Work with team leads to resolve people problems and project roadblocks, conduct post-mortem and root cause analyses to improve practices for maximum productivity.
Talent Development
- Coach junior members in team to enhance their data privacy và security capability.
- Identify and encourage areas for growth and improvement within the team and support with personal development plan.