Expert, Information Security (40001096)

## Job Purpose The job holder perform duties in designing, building, testing and implementing banking information security solutions. ## Key Accountabilities (1) o Proposing action plans related to security development activities - Participate in proposing the annual action plans of the unit - Participate in building/advising on the overall strategy of the unit o In-depth research, propose solutions and techniques for activities: - Research and develop information security measures and solutions: Network security, Endpoint security, Data security, Application Security - Requirements development, security design, risk modeling, information security testing (source code review and testing), deployment of security controls. - Develop advanced security testing standards and techniques - Develop and apply secure programming standards, based on CWE/SANS top 25, OWASP - Update, analyze vulnerabilities/weaknesses and assess effects on Techcombank in order to offer appropriate protection measures. - Coordinate with the security monitoring và response department to analyze, and respond to attacks that affect the bank's operations. Apply security measures and solutions to effectively and thoroughly eliminate/prevent threats." ## Key Accountabilities (2) - Planning information security strategy: o Participate in the development of information security strategy and annual strategic implementation plan according to assigned tasks - Implement information security activities: o Participate in the development of information security solutions for large, key projects involving many technology fields. o Coordinate and providing in-depth skills to resolve security incidents o Technical advice, training for other staffs o Analyze trends in cyber warfare, risks and vulnerabilities to propose suitable testing strategies and prevention methods. o Research new solutions and technologies to advise leaders in planning information security strategies. ## Key Accountabilities (3) Other missions: - Participate in the implementation and/or support of technology projects - Organize training, career development orientation for employees, foster and build human resources for the department. - Perform other related tasks at the request of management levels. ## Key Relationships - Direct Manager Manager, Senior Manager, Information Security ## Key Relationships - Direct Reports ## Key Relationships - Internal Stakeholders ## Key Relationships - External Stakeholders Information security solutions/services companies, quick incident response organizations…etc. ## Success Profile - Qualification and Experiences Qualifications - University degree in IT or electronics or telecommunications or related fields Work Experience - At least 08 years of working experience in information security management in financial / service / telecommunications organizations. - Experience in planning information security / information technology strategy; - Experience in research, design and implementation in the field of information security. Other requirements - Experience in Agile Product Development - Business English requirements according to TCB's policy.