Senior IT Security Officer (Gorvernance - Risk - Compliance)

1. IT risk and compliance frame work and management
- Develop IT risk management methodology, plan and conduct risk assessment programs for IT systems
- Corporate with IT functions and other departments to develop and update timely the IT risk & control matrix
IT Security standards management
- Research, develop and implement International security standards and other entity requirements (SBV, PCI-DSS ...) into company systems.
- Research and development, implement standards and policies to comply with PDPD 13.
- Co-ordinate with other IT teams to develop technical policies, standards, procedures align with LOTTE FINANCE IT security requirements
2. Reporting and administration
- Control for implementation of IT Security strategy and plans of IT Security
- Control approve the request/changes related to security, control activities of IT security: implementing, operating, vulnerabilities management
- Build up key indicator to monitor and improve IT Security services like SLA, KRI, RPO, RTO, ...
- Work with both internal/external audit during audit programs
- Training IT security awareness
- Collect, analysis, buidlup report for IT Security
- Do others jobs assigned by Manager/Director