CIMB Bank Vietnam

Tóm tắt công việc

• To review and improve best practice IT Security across the technology state.
• To identify, recommend and deploy technical security enhancements in line with the agree risk policy.
• To work on a range of information security, data protection and risk management related activities, including policy compliance, vulnerability management, identity and access management, secure coding practices, rights management, data loss prevention, event monitoring and reporting, risk assessments, and incident response.
• To ensure that policies, controls, and solutions are continually monitored and improved in response to new threats and business opportunities.
• To provide guidance and support and making sure business units meet local and group requirements under  IT Security and Governance, Quality Assurance, Security/Compliance
• Ensuring IT systems and applications within our organization meet the needs of the business while adhering to security best-practices, compliance and regulatory requirements.
• To work as part of an ongoing programme to improve the Information Security management and technical controls.

Key Responsibilities

• Assess controls for information in every form / all formats (e.g. electronic and physical).
• Recommend fixes for detected vulnerabilities to maintain a high-security standard.
• Coordinate to perform or oversee vulnerability and penetration testing.
• Investigate security breaches and other cyber security incidents.
• Research security enhancements and make recommendations to management.
• Stay up-to-date on information technology trends and security standards.
• Monitor the security effectiveness across the portfolio.
• Assess the current state of information security and help to drive the organization toward higher levels of maturity and efficiency.
• Assist to develop and monitor reliable metrics for information security activities to identify trends and develop action plans to drive continuous improvements.
• Help team members understand the value of information security management.
• Assess information infrastructure security.
• Assist, when requested, in establishing information security requirements for all new features and services while assessing and driving security enhancements across existing solutions.
• To identify and eliminate manual processes using automation for areas involving information security.

Why You'll Love Working Here

Your Skills and Experience