Đến nội dung chính
Tuyển Dụng
← Công ty Cổ phần Chứng khoán VPBANK

Head of Information Security Cybersecurity/SIEM

Công ty Cổ phần Chứng khoán VPBANK · Hà Nội
Ứng tuyển tại trang chính thức ↗
Loại hình
Toàn thời gian
Hình thức
Tại văn phòng
Cấp bậc
Giám đốc
Ngành nghề
Ngành nghề khác
Mức lương
Thương lượng
Địa điểm
Quận Đống Đa, Hà Nội, Hà Nội

Tổng quan

  • Information Security Strategy and Governance
  • Develop and execute the enterprise information security strategy aligned with VPBanks Securities’ business strategy, digital transformation roadmap, technology modernization
  • and risk appetite.
  • Establish and maintain information security governance frameworks, policies, standards, procedures, and control requirements across the company.
  • Define the information security target operating model, including people, process, technology, governance, metrics, and accountability.
  • Provide strategic advice to senior management on cyber risk, information security priorities, regulatory expectations, and investment requirements.
  • Drive a security-by-design culture across technology, product, operations, digital platforms, cloud, data, and third-party ecosystems.
  • Enterprise Security Assurance
  • Lead the overall security assurance program for trading platforms, core securities systems, customer portals, mobile applications, APIs, infrastructure, cloud platforms, data platforms, and critical business services.
  • Oversee security reviews and risk assessments for new products, digital investment services, technology initiatives, outsourcing arrangements, vendor integrations, and
  • major transformation programs.
  • Ensure appropriate security controls are embedded throughout the system development lifecycle, change management process, cloud adoption journey, and production
  • operations.
  • Manage vulnerability management, penetration testing, red team exercises, secure code review, configuration review, and remediation governance.
  • Establish measurable security control assurance and reporting mechanisms for executive-level visibility.
  • Cloud and Digital Security
  • Lead the security strategy and control framework for cloud adoption, including public cloud, private cloud, hybrid cloud, container platforms, DevSecOps, cloud-native
  • applications, and cloud infrastructure.
  • Define cloud security standards covering identity, network security, data protection, encryption, key management, monitoring, workload protection, configuration baseline
  • and compliance.
  • Partner with technology, digital product, and trading platform teams to enable secure, scalable, and resilient digital services.
  • Ensure that cloud and digital initiatives meet internal security requirements, regulatory obligations, and industry good practices.
  • Security Operations and Incident Response
  • Oversee security monitoring, threat detection, incident response, cyber crisis management, and security operations capabilities.
  • Ensure effective operation and continuous improvement of SOC, SIEM, SOAR, EDR/XDR, threat intelligence, DLP, WAF, IAM, PAM, network security, and related
  • security technologies.
  • Lead the development and testing of cyber incident response plans, playbooks, escalation processes, and post-incident review practices.
  • Coordinate with internal stakeholders, regulators, exchanges, depository/clearing institutions, external partners, and law enforcement agencies where required during
  • major security incidents.
  • Strengthen VPBank Securities’ cyber resilience through proactive threat hunting, attack simulation, crisis drills, and lessons learned.
  • Regulatory Compliance and Risk Management
  • Ensure compliance with applicable requirements from the State Securities Commission of Vietnam, Vietnam Exchange, HOSE, HNX, VSDC, cybersecurity and data protection laws, and other relevant financial market regulations.
  • Align the company’s information security practices with recognized standards and frameworks such as ISO 27001, NIST CSF, CIS Controls, PCI DSS, and other applicable frameworks.
  • Work closely with Enterprise Risk Management, Operational Risk, Compliance, Legal, Internal Audit, and Technology Risk teams to manage information security risk across
  • the company.
  • Support internal and external audits, regulatory inspections, and remediation programs related to information security.
  • Maintain effective risk reporting, issue tracking, and remediation governance for executive committees.
  • Data Protection and Identity Security
  • Lead security initiatives related to customer data protection, transaction data security, data classification, data loss prevention, encryption, privacy protection, secure data
  • sharing, and sensitive data handling.

Quyền lợi

Chế độ bảo hiểmChế độ thưởngChăm sóc sức khỏeDu lịchĐào tạo

Tóm tắt thông tin từ tin tuyển dụng chính thức. Xem bản gốc ↗

Quan tâm đến vị trí này?

Bạn sẽ được chuyển đến trang ứng tuyển chính thức của nhà tuyển dụng.

Ứng tuyển tại trang chính thức ↗
Đây là doanh nghiệp của bạn? Nhận quản lý trang, yêu cầu chỉnh sửa hoặc gỡ bỏ
→