• Planning/studying/designing and implementing cloud strategy/solution/architect on multi cloud environments
• Buildup/implementing/control apply security control on multi cloud environments
• Analyze/Developing prerequisites and implement best practice for cloud environment
• Practice with modern DevSecOps with automation (nice to have) Ability to automate repetitive tasks (scripting skills in Bash/PowerShell/ Python)
• Researching and implementing the updated security standards, systems, and best practices
• Detect and handle risks for IT systems, improve and maintain compliance
• Performing vulnerability assessment, security testing, and risk analysis
• Improving security standards & quality IT security services & reports
• Control and promote the implementation develop of IT security
• Test and evaluate new security solution/new security technology

1. Trình độ Học vấn

• Bachelor's or Technical Degree Required (IT, Cryptography, computer science, information systems, business administration or other industry-related curriculum)
• Has appropriate subject matter expertise in their area of information security specialisation

2. Kiến thức/ Chuyên môn Có Liên Quan

• Have at least a minimum of 5 years of experience in the area of specialization
• Have a good knowledge international IT security standards (ISO 270001, PCI-DSS,…), ITIL
• Work experience with one or more cloud service providers
• Deep understanding of cloud service architecture with emphasis on security in the cloud
• Solid understanding of modern information security methodologies and standards, especially in cloud environment
• Cloud/Security certification desired
• Knowledge and experience supporting IAM, security operations and threat response
• Practice with modern DevSecOps with automation (nice to have)Ability to automate repetitive tasks (scripting skills in Bash/PowerShell/ Python)
• Have good knowledge about: network security, system security, application security and virus/malwares, secure coding
• Expert with architect, security technology, integration
• Have good knowledge with pen test with OWSAP Standard and ability discovery & exploit vulnerabilities, cyber attack
• Good knownleged some tools for hacking:  VA, APPScan, Metaexploit, kalilinux
• Experienced in implementing ISO27000/PCI-DSS is preferred
• Have good knowledge with secure coding with some languages: Python, Shell, PHP and have good knowledge with encryption, cryptography techniques

3. Các Kỹ Năng Chính

• Have ability to read and understand the professional documents in English.         
• Strong interpersonal and communication skill
• Be able to catch up and manage works quickly and effectively
• Be able to work independently with high pressure, good in teamwork
• Careful, responsible, and secure in protecting information/data belong to Bank
• Good knowledge of risk management principles, methodology and practice         
• Preferred Fluent in English

4. Các kinh nghiệm liên quan

• Stakeholder expectation management
• People Management
• Risk Management
• Budget Management

5. Các năng lực cần có

• Strong Logical Thinker and Planner
• Management, Leading ability / Năng lực quản lý và khả năng lãnh đạo.
• Implementation and Deliver ability / Năng lực thực hiện và chuyển giao.

QUYỀN LỢI

• Competitive salary and bonus package
• Staff loan with special interest rates
• Traing courses based on the job, Training framework/Learning RoadMap for each position
• Insurance in accordance with Labor laws + VPBank Care insurance for all employees. (insurance covered for family members for entitled employees);
• Annual leave (varied based on job grade)
• Travel allowance
• A dynamic and friendly working environment, full of great opportunities to develop your career and abundant interesting activities to join (Sports competitions, talent contests, teambuilding…)
• Working time: from Monday to Friday & 2 Saturday mornings/month

• Job type : Permanent
• Salary: Competitive