Prudential Vietnam Assurance

Tóm tắt công việc

Infrastructure Security
• Measure and enhance current security controls to comply with regulatory requirements.
• Provide reporting and metrics on the state of security ongoing and associated IT security risks.
• Continuously monitor Security operation and vendor’s service for all solution in place. (WAF, DLP, AV, NG, PIM…).
• Support IT patch management with special focus around IT security related patches.
• Review security configurations of the systems against regional baseline and identifying gaps between them to fix.
• Controlling Privileged IDs and the release for usage.
• Take part in the implementation of security programs within the local business.

Cyber security Automation
• Automate security controls, data and processes to provide better metrics and operational support
• Reduce time-to-detect and time-to-remediate by driving the automation of applied IT security initiatives from Regional
• Develop innovative solutions to protect networks, assets and products by implementing state-the-art detection, prevention, and response capabilities

Cloud Security
• Support the delivery of PVA’s cloud security offering, including security governance, strategy, risk assessments and management, data protection, cloud-based identity and access management, technology/provider-specific architecture and monitoring/analytics both for and in the cloud.
• Evaluated business and technical requirements to identify and implement state-of-the-art security controls and drive continuous improvement in cloud security operations.

Why Should You Apply?

- Attractive salary
- Beneficial package including: Yoga class, health talk, mental counseling, pension plan, life insurance & financial supports
- Open environment and clear career road map
- 20 days of annual leave

• University degree in Information Security or Computer Science with significant demonstrable experience in Information Security
• Certification such as CCSP, CCSK, SSCP are desirable but not required.
• A minimum of 5 years relevant experience in Information Security (Technical) with 2 years’ experience in Cloud Security implantation and operation.
• Broad knowledge of security domains, trends, and technologies (such as threat and vulnerability management, network security, endpoint security, web application security, data loss prevention, encryption, security hardening).
• Technical understanding of various platforms (e.g. Windows, Unix, network, database)
• Be familiar with cloud security frameworks, compliance requirements and security operations.
• Ability to map security controls to compliance requirements for cloud environments.
• Familiarity with Cloud based security technology (Cloud based WAF, DDoS Protection).
• Ability to quickly ramp up on new cloud security technologies.
• Familiarity with industry standards such as PCI DSS, NIST SP-800 Series, CIS 20, CSA CCM.