Head of Security

Mô tả công việc
Mức độ phù hợp và xếp hạng của bạn so với ứng viên khác như thế nào?
Security Strategy & Risk Management:
• Develop the information security strategy and roadmap aligned with business objectives, group direction, and risk appetite.
• Proactively identify emerging security risks and vulnerabilities; assess business impacts and define appropriate mitigation plans and priorities.
• Establish security priorities and investment recommendations based on risk exposure and business needs.
Security Governance & Standardization
• Develop, standardize, and maintain information security policies, standards, procedures, and control frameworks.
• Establish clear security requirements, roles, responsibilities, and accountability to ensure consistent implementation across the organization.
• Ensure security governance aligns with applicable laws and regulations and recognized standards such as ISO/IEC 27001 and relevant data protection regulations.
Implementation Oversight & Compliance:
• Oversee the implementation and effectiveness of security policies and controls across IT infrastructure, applications, networks, endpoints, and cloud environments.
• Monitor compliance, conduct security assessments, and identify gaps between established standards and actual practices.
• Drive remediation plans, track implementation progress, and ensure relevant teams meet defined security requirements.
• Provide guidance and oversight to technical teams and stakeholders, ensuring security standards are effectively adopted and sustained rather than relying on ad hoc instructions or individual interventions.
Group HQ Coordination & Legal Compliance:
• Coordinate with Group HQ to implement, monitor, and operate group-wide security policies, standards, and initiatives at the company.
• Ensure compliance with group security requirements and applicable laws and regulations, including local Vietnamese regulations, and report implementation status to HQ.
Security Business & P&L:
• Own the P&L of the security services business, including revenue, margin, and growth targets.
• Develop the business strategy, service portfolio, and go-to-market plans for security consulting, SI, and SM services for group affiliates and external customers.
• Lead business development, presales, and key client relationships; ensure the quality, SLA, and profitability of delivered projects and services.
Team Leadership & Organization Building:
• Build, lead, and develop the security organization, including consulting, SI delivery, and SM operations teams.
• Define team structure, roles, and capability development plans; recruit and grow key talent.
• Establish an internal security governance function with an independent escalation path, separating compliance oversight from service delivery to avoid conflicts of interest.
Stakeholder Management & Continuous Improvement:
• Collaborate with business units, IT teams, management, and other stakeholders to embed security into business operations and technology initiatives.
• Report security risks, compliance status, roadmap progress, and business performance to management, providing recommendations for decision-making.
• Continuously improve the organization's security governance and maturity in response to evolving threats, business needs, and regulatory changes.