Security Auditor

VNG Corporation

Địa điểm làm việc: Hồ Chí Minh

Hết hạn: 07/01/2021

Chi tiết công việc
Giới thiệu công ty

Vị trí công việc này hiện tại đã hết hạn nộp hồ sơ, bạn có thể tham khảo thêm một số công việc liên quan phía dưới

Security Auditor

Mã vị trí: 20-ISO-0828

Nơi làm việc: Tp.Hồ Chí Minh

Lương: Thỏa thuận

Mô tả công việc

Works under the direction Security Managers and Lead Auditor to deliver high quality audit results on Information Security (ISO) internal auditing program
Possesses a knowledge and experience in auditing general IT and application controls across a variety of technologies, infrastructure and platforms using IS industry best practices and standards, including the NIST Cybersecurity and Risk Management Frameworks. Applies an understanding of high risk IS/cyber areas including identity and access management, data protection, encryption, firewall security, intrusion detection and prevention systems, incident management, security operations, vulnerability patching, cyber intelligence gathering and insider threat.
Uses strong communication skills both oral and written to interact with audit stakeholders. Asks insightful questions and uses strong listening skills to document responses and formulate relevant follow-up questions.
Ability to learn and apply SIA (Security Internal Audit) methodology and quality assurance guidelines to all aspects of the audit work and work with in-house audit applications to document key aspects of audit work flow.
Supports the timely delivery of comprehensive regulatory and internal audit issue validation, and where determined appropriate, issue validation on other remediation actions, including issues arising from the external auditors, consultants and other parties.
Contributes towards the delivery of high impact reports of SIA's contributions to executive management, regulators.
Possesses strong work ethic and interpersonal skills, makes sound decisions while communicating rationale to team members, exhibits initiative and intuitive thinking, political astuteness, and sensitivity to cultural diversity.
Collaborates across businesses and functions to improve the identification, quantification, measurement, management, reporting and controls in governance, risk management and internal control environments

Policy and Documentation

Develops in association with the organization's Information Security and/or Privacy Committee the information security policies and procedures.
Implements the organization's information security policies and procedures.
Monitors compliance with the organization's security policies and procedures among employees, contractors, alliances and other third parties and takes corrective action. Manages information security incident response.
Examines department activities for compliance with management plans and policies.
Initiates, facilitates, and promotes activities to foster information security awareness within the organization.

Project Control

Prepare project status reports by collecting, analyzing, and summarizing information and trends.
Schedule and facilitate meetings related to projects.
Manage project execution to ensure adherence to schedule, scope.
Monitor or track project milestones and deliverables.
Direct or coordinate activities of project personnel.

Yêu cầu

BA/BS or equivalent. Related certifications (CISSP, CISA, CISM, or similar) are desired.
Demonstrated experience in performing information security audits that are complete, insightful, timely, concise, cost effective, and are in accordance with IA standards, laws, and local regulations.
Experienced in the use of flowcharting tools (i.e. Visio, Powerpoint)
Advance skill or experience in data analytics is desired
Experience in auditing SIA or Big 4 IT Audit controls across a variety of technologies and platforms and understanding of the FFIEC Cyber Assessment Tool (CAT) and the NIST Cybersecurity and Risk Management Frameworks.
Experience in contributing to CIS risk assessments that align to organization strategies and business objectives.
Articulate and effective communicator, both orally and in writing, with an energetic, charismatic and approachable style, well-developed listening skills. Ability to articulate both verbally and in writing audit work and findings to a broad audience.

Chia sẻ: