MSIG Vietnam

Tóm tắt công việc

PURPOSE:
Provide technical direction in IT security to business operation and technical consultation in system development, new solution evaluations
Communicate IT Security issues and propose any controls to protect MSIG VN data asset.
Support for any problem relating to IT security.
Report any security gaps, design effective solution
Conduct penetration testing, vulnerabilities, forensic and other security risk assessment projects.
Formulate security response plan to be able to response to Cyber security incidents
Educating and advice on cyber security management in response to cyber threat
Conduct & Enhance cybersecurity awareness programmes for staff, where require
CONTEXT:
IT Infrastructure which included Networks, Servers, Endpoints
All Information system and applications used within MSIG VN
MSIG VN IT Policy Regulation and Guideline
Cybersecurity Strategy and Framework
DIMENSIONS:
Execution of assigned tasks or project related work
IT Security Key Performance Indicator
KEY OUTPUTS:
Cyber defence plan for MSIG Vietnam (VN)
Subject Matter expert on securing network configuration and secure development requirement.
Established Security monitoring systems
Ensure compliance with security standards and framework
Cybersecurity awareness training materials.
Security solution proposals
Ensure and maintain IT security for whole system.
Timely review/update/upgrade/reconfigure security protections.
Study, prevent, fix and resolve alerts, security events.
Report timely and correctly.
RELATIONSHIPS:
Work with Regional Holding Company Information Communication Technology Security
Key Business personnel in MSIG VN
MSIG VN IT Managers and IT Division
Technical consultants & Suppliers
DECISION MAKING AUTHORITY:
To act within delegated authority given by IT Senior Manager.
KEY PERFORMANCE INDICATORS:
Increase cybersecurity maturity level of VN for security procedures (People, Process and Technology)
Increase awareness level of staff at MSIG VN
Operation efficient program and cost saving.

QUALIFICATIONS:
Bachelor Degree in software engineering or related fields
Professional Security Certification (e.g. CISSP)
SKILLS/KNOWLEDGE:
Technology trends, security implication and directions
Solid grasp of technical concept, operating systems, network, database, cryptography, programming and scripting language.
Knowledge on using security tools for testing and assessment
Working knowledge of Cybercriminal techniques and targets
EXPERIENCE:
Have 3-5 years related work experience in similar capacity or At least 4 year experience in IT, in which 0.5 year IT service, 1.5-2 years in software development and 1.5-2 years in system
Strong experience across IT Security
Experience in IT Systems, network, infrastructure, application development and support
COMPETENCIES:
Applying Technical knowledge
Being Ethical and Compliant
Collaborative Relationships
Communicating with impact
Customer Focus
Developing Self, Direct reports and Others
Driving Results
Managing Execution
Problem Solving