IT Information Security Engineer

Position Summary
IBK Vietnam is seeking an Information Security engineer who will establish, implement, and operate the Bank's information security and network security framework.
The role translates regulatory and compliance requirements into effective technical security controls, ensuring that the Bank's IT infrastructure, network environments, and security systems comply with internal policies and local financial regulations.
The position also plays a key role in security operations, incident response, and maintaining a secure and stable network environment to support core banking services.
Key Responsibilities
1. Security Operations & Incident Response
• Administer and manage security controls including Next-Generation Firewalls (NGFW), IDS/IPS, WAF, DLP, EDR, NAC, and security monitoring solutions.
• The implementation of requirements related to Identity and Access Management (IAM), privileged access, network segmentation, and access control.
• Monitor security events, alerts, and logs to identify potential security incidents and security weaknesses.
• Support and coordinate security incident response, including detection, containment, investigation, root cause analysis, remediation, and recovery.
• Perform regular security health checks and review security configurations to identify potential risks and weaknesses.
• Coordinate vulnerability assessment activities, track identified vulnerabilities, and follow up on remediation actions.
• Support and coordinate third-party penetration testing and security assessments.
• Assist in security incident investigation and coordinate with IT, infrastructure, application teams, and vendors for remediation.
• Maintain security monitoring records, incident reports, vulnerability records, and other operational security documentation.
• Support the implementation and continuous improvement of security controls and operational security procedures.
2. Security Governance & Policy
• Support the development, maintenance, and implementation of IT security policies, procedures, standards, and guidelines in alignment with SBV Circular 09/2020/TT-NHNN and other applicable regulations.
• Support the implementation of security baselines and hardening standards for network devices, servers, endpoints, applications, and other IT infrastructure.
• Support information security risk assessments, remediation tracking, and follow-up activities.
• Support security requirements for IT projects, system changes, infrastructure deployments, and third-party/vendor engagements.
• Prepare and maintain security documentation, control evidence, assessment reports, and audit materials.
• Support internal and regulatory security audits, inspections, and compliance activities.
3. Network Infrastructure
• Manage and support the implementation and maintenance of network security architecture, and other security zones and troubleshoot secure connectivity and other external/third-party connections
• Support the operation and maintenance of the Bank's network infrastructure, including L2/L3 switching, routing, VLANs, and network segmentation.
• Monitor network availability, performance, connectivity, and capacity to ensure stable operation of critical banking services.
• Support network changes, upgrades, migrations, and infrastructure implementation activities.
• Maintain network configuration records, network diagrams, IP address information, and technical documentation.
• Coordinate with network vendors, ISPs, and service providers for installation, troubleshooting, maintenance, and technical support.