[HN/HCM] IT Security Governance Specialist

Main responsibilities:
Cybersecurity risk and compliance framework and management:
Work with VPB Risk Division to develop and adopt risk management framework.
Perform the role of Cybersecurity Advisory to new and existing systems to reduce cybersecurity risks on a regular basis.
Produce cybersecurity requirements for all systems to protect and reduce the cybersecurity risk for the Bank.
Ensure that third party risks are managed
Manage the relevant stakeholders so that they understand the risks and be guided in making the right risk decisions for the Bank.
Ensure all Cybersecurity Risk are recorded, tracked and addressed in the agreed timeline.
Ensure that the IT Security services are effectively implemented
2.
Cybersecurity
Policy & Standards
Ensure that Cybersecurity Policies and Standards are aligned to SBV requirements and the desired cybersecurity posture of the Bank.
Co-ordinate with other teams to develop technical policies, standards, procedures align with VPB Cybersecurity requirements.
Develop guidelines to provide directions to stakeholders.
3.
Cybersecurity
Awareness
Ensure that the Awareness program is implemented effectively.
Review and update the Awareness program to ensure relevancy to the current cybersecurity threats.
Engage the target audience with the relevant cybersecurity materials and methods to instill a cybersecurity mindset.
4.Reporting and Administration
Control approves the request/changes related to security, control activities of IT security: implementing, operating, vulnerabilities management
Work with both internal/external audit during audit programs
Collect, analyze and produce report for IT Security every month
5. Leadership
Demonstrate and guide the team to achieving the cybersecurity goals to secure the Bank.
Develop the team members to ensure that their skills meet the requirements of Business initiatives
6. Projects
Build up the cybersecurity capabilities to strengthen the cybersecurity posture of the Bank
Job Requirements:
Bachelor's Degree in Information Assurance, Security, Technology, Business Administration or relevant fields.
3 years or more of working experience in IT/IT security banking, good knowledge international IT security standards (ISO 270001, PCI-DSS...), ITIL
Have good knowledge about: SBV regulation, risk management best practice.
Have basic IT Security technical knowledge: Security controls for network, system, application, identity management.
Knowledge for cybersecurity management framework: NIST, CIS.. is preferred.
Have experience on IT security related procedure, process, policy, regulation development, reviewing, and updating.
Have ability to read and understand the professional documents in English.
Strong interpersonal and communication skill
Be able to well develop, present the report is preferred.
Be able to catch up and manage work quickly and effectively.
Be able to work independently with high pressure, good in teamwork.
Careful, responsible, and secure in protecting information/data belong to Bank
Good knowledge of risk management principles, methodology and practice
Preferred Fluent in English