3 IT Security Engineer (Architect/SecOps/Governance)

*According to Decree No.13/2023/ND-CP on protecting personal data (“PDP”), Home Credit Vietnam would apply "Personal Data Processing Agreement" with all candidates to ensure compliance with the decree.
By submitting this application to Home Credit Vietnam Finance Company Limited through ITViec, you agree to allow Home Credit to proceed your provided information in accordance with Personal Data Processing Agreement that you have read, fully understood and agreed to the entire content at link

We are open 3 vacancies in IT Security Team: 

1/ Architect Position

• Ensure IT Security solutions architecture and portfolio is aligned with approved IT Security Strategy and IT Security policy.
• Ensure projects are compliant with the security architecture framework and secure development standards.
• Ensuring security solution meets the business requirements, security and performance goal.
• Evaluate and document existing security technology solutions (databases, application, network, governance or monitoring security tools and technologies, and so on).
• Follows the new/current security trends and technology trends and identifies systems with risk for the functioning company and implements minimum security level required; provides a security solution business processes.
• Identify the IT risk at the beginning of the project and required security controls or corrective measures.
• Provide stakeholders with the explanation of security risks, controls, and measures in business language.
• Participate the assessments and remediation of identified findings of IT Security.
• Reduce workload to security team by adding automation in daily/weekly/quarterly task

2/ SecOps Position

• Establish and ensure Security Controls.
• Collaborate with Functional Teams for designing and implementing Security requirements on-premise/ cloud environment.
• Responding to security incidents and write reports/ write-ups.
• Reviews violations of security procedures; provides corrective measures to ensure violations do not recur.
• Cover area of user account life cycle management, including creating, provisioning, securing, and inactivation of access.
• Participate in projects and production support operations focused on implementing Identity and Access Management (IAM) integrations and Roles Based Access Control (RBAC) strategies and integrations.
• Collaborate in the design, implementation, and support of the IAM technologies.
• Participate in projects to ensure standard processes and procedures are implemented when rolling out new provisioning role management points.
• Performs other related duties as assigned.

3/ Governance Position 

• Develop and enforce security policies, standards and guidelines to ensure compliance of Information Security with regulations.
• Define IT security requirements and controls in line with the security classification, and internal and external regulations.
• Perform the IT Risk assessment, maintain the IT Risk register and an inventory of controls, implement controls to address identified risk exposure, identify risk response options.
• Identifies and consolidates information assets, maintains Information asset register.
• Perform and report regular check the IT security compliance requirements.
• Initiate, facilitate, and promote activities to foster information security awareness within the organization, create set of trainings for different groups of users to accommodate their needs.
• Contribute to team effort by accomplishing related results as needed.
• Prepare project status reports by collecting, analyzing, and summarizing information and trends.
• Schedule and facilitate meetings related to projects.
• Manage project execution to ensure adherence to schedule, scope.
• Monitor or track project milestones and deliverables.
• Direct or coordinate activities of project personnel.