Prudential Vietnam Assurance

Tóm tắt công việc

Scope 1: Infrastructure Security
- Measure and enhance current security controls to comply with regulatory requirements.
- Provide reporting and metrics on the state of security ongoing and associated IT security risks.
- Continuously monitor Security operation and vendor’s service for all solution in place. (WAF, DLP, AV, NG, PIM…).
- Support IT patch management with special focus around IT security related patches.
- Review security configurations of the systems against regional baseline and identifying gaps between them to fix.
- Controlling Privileged IDs and the release for usage.
- Take part in the implementation of security programs within the local business.

Scope 2: Cyber security Automation
- Automate security controls, data and processes to provide better metrics and operational support
- Reduce time-to-detect and time-to-remediate by driving the automation of applied IT security initiatives from Regional
- Develop innovative solutions to protect networks, assets and products by implementing state-the-art detection, prevention, and response capabilities

Scope 3: Cloud Security
- Support the delivery of PVA’s cloud security offering, including security governance, strategy, risk assessments and management, data protection, cloud-based identity and access management, technology/provider-specific architecture and monitoring/analytics both for and in the cloud.
- Evaluated business and technical requirements to identify and implement state-of-the-art security controls and drive continuous improvement in cloud security operations.

- University degree in Information Security or Computer Science with significant demonstrable experience in Information Security
- Certification such as CCSP, CCSK, SSCP are desirable but not required.
- A minimum of 5 years relevant experience in Information Security (Technical) with 2 years’ experience in Cloud Security implantation and operation.
- Broad knowledge of security domains, trends, and technologies (such as threat and vulnerability management, network security, endpoint security, web application security, data loss prevention, encryption, security hardening).
- Technical understanding of various platforms (e.g. Windows, Unix, network, database)
- Be familiar with cloud security frameworks, compliance requirements and security operations.
- Ability to map security controls to compliance requirements for cloud environments.
- Familiarity with Cloud based security technology (Cloud based WAF, DDoS Protection).
- Ability to quickly ramp up on new cloud security technologies.
- Familiarity with industry standards such as PCI DSS, NIST SP-800 Series, CIS 20, CSA CCM.
- Knowledge of risk management principles
- Strong interpersonal and communication skills
- Strong project management experience
- Strong analytical and problem-solving skills