Director, DevSecOps

Job Purpose

The Director, DevSecOps is responsible for providing communication, integration, automation, and fluidcooperation between all cross-functional teams to plan, develop, test, deploy, release, and maintain a solution;managing and leading DevSecOps team to design, implement, automate, and enhance the ContinuousDelivery/Continuous Integration pipelines that represent the DevSecOps ways of working, workflows, and gitoperations to deliver functionalities from proof of concepts to an on-demand release of value to the end user.

Key Accountabilities

Main work:

- Continuous Delivery Through DevSecOps Factory:

+ Build, map and optimize the delivery of Continuous Delivery pipelines by addressing key elements such as:Process time, Lead time, Delay time, Percentage of completion and accuracy.

+ Continuous Exploration by analyzing and researching the development and implementation of newtechnologies/features; modification and improvement of existing architectures; define and prioritize activities inthe platform backlog according to its needs.

+ Continuous Integration by building, integrating features, bugs fixing the new versions of services andplatforms; automating end-to-end testing and validating application services on non-production environments.

+ Continuous Deployment of services and platforms from non-production all the way to production.

+ Release applications/services features fast, efficiently, and first to market on demand of business.

- DevSecOps Factory:

+ Build, implement, improve and measure DevSecOps factory: Tools Chain, Culture, Ways of Working, Mind Set

+ Build, automate, enhance, and integrate security governance: Application và platform continuous securitymonitoring; API security Testing; Penetration testing; Protocol Fuzzing; Threat Modeling.

- Report periodically to the Head of IT Infrastucture Services.

Optimization and compliance:

- Implement and enhance automated Test and Verification, with:

+ Verification of expected business value.

+ Defects found and fixed immediately (Roll forward)

- Increase visibility with automated generation of Information and Reporting, by providing:

+ Dynamic self-service of information

+ Customizable dashboards

+ Cross-reference across organizational boundaries

- Engage stakeholders early and consistently throughout the SDLC, leading to few defects and incorrectrequirements.

- Build trust between software engineering and IT, enable organic process improvement and risk mitigation.

- Maximize business value by enabling technical staff to adapt to changing requirements or environmentalfactors.

PEOPLE MANAGEMENT

- Oversee human resources planning and execution (headcount & costs) of their function/ sub- function

- Attract, onboard and retain the right talents for a high- performing team

- Establish and communicate sub- function/ function and individual KRAs/ KPIs, goals, action plan, expectationsand results to reporting line

- Manage sub- function/ function performance & provide feedback regularly (following the annual performancemanagement cycle)

- Define team’s capability requirements and enable team member’s professional and personal developmentthrough capability assessment, training, coaching & feedback, mentoring, etc.

- Motivate and recognize team members’ contributions towards the team’s shared goals

- Responsible for developing talents within the function/ sub- function

- Act as a role model and promote corporate culture at function/ sub- function level

- Understand & communicate relevant HR offerings to team members.

Qualifications

- Graduated from university majoring in Computer Science/Engineering, Software Engineering or InformationTechnology

Work Experience

- At least 12 years of experience in software development and minimum 7 years of experience in DevSecOps setup.

- Expert knowledge of DevSecOps factory pipeline components and DevSecOps Metrics.

- Expert knowledge and working experience with public and hybrid cloud environments.

- Hands-on experience on code, commit, code review, document, test, integrate, QA, monitor with frontend andbackend languages and technologies.

- Expert knowledge and working experience with DevSecOps tools Chain and security governance

- Expert knowledge and working experience with Infrastructure as Code and Configuration management

- At least 6 years in management position.

Foreign language

- English, according to TCB's regulations in each period

Other requirements

- International Certificate of System

- Master Degree is an advantage