Information Security Officer

I. Job Summary - The job holder needs to ensure that business operations comply with requirements on Information Security and standards (Shinhan Group, SBV, VN’s law …) II. Key Roles & Responsibilities - Implement security improvements by assessing current situation, evaluating trends, and maintaining security controls. - Monitor security policies programs or procedures to ensure compliance with internal security policies, circulars from SBV and applicable government security requirements. - Determine security violations and inefficiencies by conducting periodic security audits to identify potential vulnerabilities related to physical security, staff safety and asset protection, ensure operational security controls implemented and maintained properly. - Defense system against unauthorized access, modification and/or destruction from daily internal and external threats by monitoring system health, performing system patches if necessary. - Perform vulnerability testing, risk analyses, assessments, and treatment plan, coordinate with related parties for consulting on remediation. - Train and establish awareness to employees on information risk and privacy-related obligations. - Ad-hoc tasks or projects from time to time assigned by Line manager/ Department Head/ Division Head.

1. Education Background - University graduated in IT or related - Certification of Information Security or IT Security is a plus 2. Experience - At least 2 years of experience in information security, experience related to IT Network/System (financial service/ banking/insurance is preferred)

3. Knowledge - CompTIA Security - Information Risk awareness - Software development life cycle 4. Skills - Analyze IT specification to assess security risks - Monitoring network activities through by IDS/IPS/Sec system to identify issues early - Basic knowledge on computer networks, operating systems (Windows, Unix/Linux) - Negotiation, Communication - Time management - Teamwork & Motivation - Good collaboration