Head of IT Security

Security Policy Development and Compliance
1.Develop, issue, and monitor compliance with IT security policies and procedures in accordance with ISO 27001, PCI DSS, and legal requirements.
2.Regularly review, update, and improve security policies to align with evolving business and regulatory needs.
3.Conduct security awareness training programs for employees and technical teams to enhance cybersecurity consciousness.
Security Solution Deployment and Management
4.Develop annual security budgets, workforce planning, and security roadmaps.
5.Lead the implementation of IT security solutions and data protection measures.
6.Manage security projects and collaborate with vendors and partners to ensure efficient security operations.
Personal Data Protection
7.Ensure compliance with data protection laws under Decree 13/2023/NĐ-CP.
8.Develop and implement management and technical measures to protect personal data.
9.Monitor, detect, and respond to threats related to personal data breaches.
10.Act as the main contact for regulatory bodies regarding personal data protection issues.
11.Assess and report on the impact of data processing and protection measures as required by law.
Security Monitoring and Operations
12.Oversee the operation and security monitoring of IT infrastructure and applications.
13.Regularly audit security systems, apply patches, and remediate vulnerabilities.
14.Detect, investigate, and mitigate security incidents following established security response plans.
15.Manage security service contracts, ensuring timely renewals and continuous system protection.
Security Assessment and Risk Management
16.Conduct risk assessments to identify and mitigate IT security threats.
17.Develop and implement cybersecurity strategies to enhance risk management.
18.Perform periodic security audits and compliance assessments to identify security weaknesses and mitigation actions.
Security Innovation and Continuous Improvement
19.Research and propose advanced security technologies to enhance IT security capabilities.
20.Develop security enhancement plans to support business growth and security resilience.
21.Report on security policy enforcement and provide recommendations for improvements.
22.Execute additional tasks assigned by senior management.