Information Security Specialist

Mô tả Công việc
About Galaxy Pay:
Vision: Become popular, connected, simple & secure payment platform for businesses and consumers in Vietnam.
Mission: Provide a smart, comprehensive online payment platform for business Apps and Websites of companies in the digital ecosystem.
Connecting customers with the digital ecosystem, creating added value and seamlessly experiences
Product & Services:
Payment Gateway
Ewallet
Payment Services
Resposibilities:
We are seeking an experienced Information Security Specialist with a background in fintech or digital payment systems to support cybersecurity, compliance, and information security operations across the organization:
Policies, Standards, and Compliance:
Review, develop, and maintain compliance with information security and IT policies, procedures, and regulations.
Classify information system levels and conduct personal data impact assessments. Develop documentation and conduct information security awareness training for users.
Participate in implementing and maintaining IT governance and security standards such as ISO 27001, ISO 27701, PCI-DSS, ITIL, and other relevant standards.
System and Application Security:
Conduct security risk assessments for backend, frontend, mobile applications, and APIs (Internal/Open/Partner APIs).
Collaborate with development teams to implement secure architecture, secure design, and DevSecOps practices.
Perform or coordinate internal/external security assessments such as Vulnerability Assessment and Penetration Testing.
Information Security Monitoring and Business Continuity Assurance:
Monitor, track, collect, and handle information security alerts, threats, and risks from internal and external sources.
Participate in developing Disaster Recovery Plans (DRP) and Business Continuity Plans (BCP) for critical IT systems.
Participate in DRP/BCP testing, reporting results, and updating related documentation.
Other Responsibilities:
Prepare periodic reports on IT system security and safety, and propose recommendations for improvement.
Perform other tasks assigned by Management and the Board of Directors