Information Security Director

The Information Security Director is responsible for establishing and maintaining the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected. The DIRECTOR will lead the Information Security function, working closely with other senior executives, IT team members, and external stakeholders to manage and mitigate security risks.

Key Responsibilities:

1. Strategy & Planning:

• Develop and implement a comprehensive information security strategy and program.

• Establish security policies, procedures, and standards to protect company assets.

• Lead risk assessment and management processes, including threat modeling and vulnerability assessments.

2. Leadership & Management:

• Manage a high-performing information security function

• Provide guidance and mentorship to IT members

• Coordinate with other departments to ensure alignment with security policies and objectives.

3. Compliance & Governance:

• Ensure compliance with relevant laws, regulations, and industry standards (e.g., GDPR, HIPAA, PCI-DSS).

• Oversee the development and implementation of information security policies and procedures.

• Conduct regular audits and assessments to ensure ongoing compliance.

4. Incident Response & Management:

• Develop and oversee incident response planning and execution.

• Lead the response to security breaches and incidents, including forensic analysis and remediation.

• Communicate with relevant stakeholders during incidents, including executive management and, when necessary, external parties.

5. Education & Awareness:

• Promote security awareness across the organization.

• Develop and deliver training programs to educate employees on security best practices and policies.

6. Technical Oversight:

• Stay abreast of the latest security technologies, threats, and trends.

• Oversee the implementation and management of security technologies and solutions (e.g., firewalls, intrusion detection/prevention systems, endpoint protection).

7. Vendor Management:

• Manage relationships with external vendors and service providers.

• Assess and select security vendors to ensure they meet the company's security requirements.

• Negotiate contracts and service level agreements to maximize value and security benefits.

• Oversee vendor performance and ensure compliance with contractual obligations.

Qualifications:

1. Education & Certifications:

• Bachelor’s degree in Computer Science, Information Security, or a related field.

• Relevant certifications such as CISSP, CISM, CISA, or equivalent.

2. Experience:

• 7+ years of experience in information security roles.

• Proven experience in a senior leadership role

• Demonstrated success in developing and implementing security strategies and programs.

3. Skills & Competencies:

• In-depth knowledge of information security management frameworks (e.g., ISO/IEC 27001, NIST).

• Strong understanding of current threat landscape and security technologies.

• Excellent leadership, communication, and interpersonal skills.

• Ability to work under pressure and manage multiple priorities.

• Strong problem-solving and decision-making skills.

What We Offer:

• Attractive & competitive salary.

• Opportunity to continuously grow, participate in training courses, work advancement with the rapid development of the Company.

• Friendly, young and dynamic yet challenging working environment.

• Full benefits according to current labor law.

• Welfare policies: Annual health care; Specialized health insurance package.

• Friendly and open working environment.

• Modern and comfortable working facilities and tools.

• Lots of opportunities for growth and advancement.

• Challenging and professional working environment.

• Discount when using Vingroup's products and services.

• Working location: Symphony Building, Chu Muy Man Street, Long Bien District, Ha Noi