Head of DevSecOps

About the Team The Head of DevSecOps is responsible for leading the DevSecOps, Cloud Infrastructure, and Site Reliability Engineering functions across the Fintech business, covering E-wallet and Payment Gateway platforms.
This role owns the overall strategy, architecture, implementation, and operation of secure, scalable, and highly available infrastructure and deployment environments. The Head of DevSecOps ensures that security, reliability, and compliance are embedded throughout the software development lifecycle, while maintaining enterprise-grade production readiness and operational excellence.
The role requires strong technical leadership, hands-on architectural capabilities, and the ability to drive cross-unctional execution across Engineering, Product, Corporate Security, IAM, and Infrastructure teams.
Key Responsibilities:
DevSecOps Strategy: Define and drive DevSecOps strategy, architecture, standards, and security-by-design practices across the software development lifecycle.
Cloud & Platform Infrastructure: Lead the design and operation of cloud infrastructure, Kubernetes, CI/CD pipelines, and Infrastructure as Code (IaC).
Design secure-by-design infrastructure architectures: ensuring security controls are embedded from the initial design stage.
Security Operations: Oversee cloud security, IAM, encryption, KMS, secrets management, vulnerability management, security monitoring, and incident response.
Reliability Engineering: Ensure high availability, scalability, and performance of critical payment systems; establish SLOs, monitoring, backup, and disaster recovery.
Security Automation: Integrate automated security scanning, infrastructure validation, configuration hardening, and security controls into CI/CD pipelines.
Observability & Compliance: Establish centralized monitoring, logging, tracing, and audit mechanisms while protecting sensitive customer and transaction data.
Operational Excellence: Drive automation, incident management, root cause analysis, and continuous improvement of infrastructure and production operations.
Team & Stakeholder Management: Lead the DevSecOps/SRE team and coordinate with Engineering, Corporate Security, IAM, Infrastructure, Risk, and Compliance teams.
Qualifications:
1. Technical & DevSecOps Experience
8+ years of experience in DevOps, DevSecOps, SRE, Cloud Infrastructure, Platform Engineering, or Information Security, with at least 3 years in leadership/management roles.
Strong hands-on experience with Linux, networking, AWS/GCP/Azure, Kubernetes, containers, Terraform, and CI/CD.
Proven experience designing and operating secure, highly available production systems.
2. Security & Risk Management
Strong foundation in GRC, Cyber Risk & Compliance, and information security governance.
Deep understanding of SOC/Security Operations and Incident Response; experience working closely with SOC/ANTT teams.
Strong knowledge of Security Architecture, Cloud/Application/API Security, IAM/PAM, Data Security, DevSecOps, and BCP/DR.
Experience implementing Security-by-Design, vulnerability management, security monitoring, and remediation.
3. Fintech & Industry Experience
Experience in Banking, E-wallet, Fintech, Payment Gateway, or large-scale 24/7 technology operations is preferred.
Understanding of security requirements for financial transactions, payment processing, and sensitive customer data.
4. Leadership & Stakeholder Management
Proven ability to lead technical teams and coordinate across Engineering, Infrastructure, Security, Risk, and Compliance.
Ability to work with senior management, auditors, regulators, and external partners.
Why You'll Love Working Here:
Flexible working hours and attendance policy (Work from Home on working Saturdays).
Attractive compensation and bonus packages, highly competitive in the market.
Exclusive employee benefits across the Group's ecosystem in accordance with company policies.
Opportunity to work on large-scale and strategic technology projects.
Professional technology environment with leading scientists, experts, and engineers from top technology companies in Vietnam and around the world.
Full statutory insurance coverage in accordance with Vietnamese Labor Law (Social Insurance, Health Insurance, Unemployment Insurance), along with private healthcare insurance based on job grade and annual health check-ups at reputable hospitals and healthcare centers nationwide.
Participation in internal activities, team-building programs, and annual company events.
📩 Apply via:
Email: [protected info]
Phone/Zalo: [protected info]