Information Security Expert ( HN/HCM) - TA144

1. Vulnerability assessment and penetration testing program and responsible for the design and performance of application security robustness tests.
Develop/implement/trainning/apply security by design framework to Bank
Security controls end to end for projects/CR make sure new services & system is safe before golive
Supporting Vendor Security activities to ensure 3rd‐party software and development meets Bank security standards.
Deliver the annual penetration testing schedule and conducting awareness campaigns to ensure proper budgeting by business lines for annual tests
Operate a hands-on role involving penetration testing and vulnerability assessment activities of complex applications, operating systems, wired and wireless networks, and mobile applications/devices
Automate penetration and other security testing on networks, systems and applications
Consult with application developers, systems administrators, and management to demonstrate security testing results, explain the threat presented by the results, and consult on remediation
Communicate security issues to a wide variety of internal and external "customers" to include technical teams, executives, risk groups, vendors and regulators
Trial attacks & incident response
Research/develop new security standards/technique guidle and apply to bank
Operate security technologies, control security changes/ensuring the safety of information technology systems
Continuously improve security controls in the software development process
2. Implement security program to security development
Participation with key technicque in security projects, security solutions requires a very high of expertise skill
Consulting for the project to resolve arising problems, beyond the technical scope
3. Develop/implement/apply security by design to Projects
Develop/implement/trainning/apply security by design framework to Bank
Security controls end to end for projects/CR make sure new services & system is safe before golive
Supporting Vendor Security activities to ensure 3rd‐party software and development meets Bank security standards.