Information Security and Cybersecurity Implementation Specialist RemoteCông ty Cổ phần Phần mềm Devwork

• Implement and guide information security and cybersecurity practices across the
organization
• Ensure integrity and safety of our SaaS platform while maintaining compliance with
international standards
• Implement secure software development practices based on OWASP best
practices
• Coordinate annual secure coding training for development team
• Conduct integrity checks for new employees
• Guide development teams on secure coding techniques
• Ensure security aspects are addressed during code reviews
• Conduct regular security assessments of our software
• Advise DevOps team on security best practices and integrate security into CI/CD
pipeline
• Prepare product for SOC 2 Type 2, ISO 27001, and GDPR certifications
• Coordinate and prepare for penetration testing
• Implement security measures for technological and physical work environments
• Guide IT personnel on continuous monitoring and updating using Microsoft
Defender
• Establish access control protocols for physical and digital environments
• Implement security protocols for remote work scenarios
• Conduct regular audits of physical and digital access rights
• Establish incident response protocols for digital and physical scenarios
• Develop and implement company-wide information security policies and
procedures
• Conduct regular risk assessments and vulnerability scans
• Assist in developing incident response and disaster recovery plans
• Serve as key point of contact for all security-related matters
• Provide regular reports on security status, incidents, and improvements to
management