Mô tả công việc
- Governance & Security Frameworks
- Develop, implement, and maintain information security policies, standards, and procedures in line with PCI-DSS, ISO 27001, NIST, and other industry best practices.
- Ensure security governance is integrated into business processes, IT strategy, and operational workflows.
- Risk Management
- Conduct cybersecurity risk assessments, identify vulnerabilities, and develop risk mitigation strategies.
- Oversee Third-Party Risk Management (TPRM) by evaluating security risks from vendors, partners, and suppliers.
- Collaborate with IT teams to monitor and enhance security controls, ensuring that critical business systems remain resilient against threats.
- Support Business Continuity Planning (BCP) and Disaster Recovery (DR) strategies to ensure operational resilience.
- Compliance & Regulatory Adherence
- Ensure compliance with Vietnamese cybersecurity laws and international regulations (e.g. PCI-DSS, ISO 27001, Data Law, Decree 13…).
- Work with internal and external auditors to manage IT security audits, compliance assessments, and security certifications.
- Conduct security awareness training and promote a security-conscious culture across Be Group.
Yêu cầu công việc
- Education & Experience
- Bachelor’s degree in information security, Computer Science, Risk Management, or related fields.
- 5++ years of experience, including 3 years in GRC, cybersecurity, or IT risk management roles.
- Hands-on experience with security compliance frameworks such as ISO 27001, NIST, PCI-DSS, GDPR, SOC 2, …
- Experience in conducting risk assessments, security audits, and compliance reviews.
- Knowledge of Vietnamese cybersecurity regulations and data protection laws is a plus.
- Technical & Soft Skills
- Strong understanding of IT security principles, risk management methodologies, and compliance frameworks.
- Ability to interpret legal and regulatory requirements and translate them into actionable security policies.
- Strong analytical, problem-solving, and project management skills.
