Assistant Vice President, IT Security VN

Location: Viet Nam

Key Responsibilities

Blue Team/ SecOps

• Develop a complete understanding of a company’s technology and information systems.

• Responsible for security information and event management (SIEM), incident tracking, and threat intelligent

• Responsible for security operation automation using SOAR (Security Orchestration, Automation, and Response) for detecting vulnerability, threats and response automatically.

• Identify security threats and risks in the operating environment, and in cooperation with the other teams, analyzes the network environment and its current state of security readiness

• Constantly monitoring for attacks and intrusions.

• Analysis our current security measures to detect potential threats, recommending enhancements, identifying areas of weakness, and responding promptly to possible security breaches.

• Write/configure necessary scripts/ rules for vulnerability/ threats analysis and detection

• Regularly communicate vital information, security needs and priorities to upper management

• Support to prepare management updates on security risks, compliance to relevant local and group stakeholders.

 

Respond to and investigate cybersecurity incidents

• Investigate security breaches and other cyber security incidents. Document security breaches and assess the damage they cause.

• Analyze system logs, define attacking methods, collect attacker’s traces and start searching for suspect. Other tasks assigned by line manager.

 

Job Specification

Certification in such as CEH/CISSP/BlueTeam is the plus.

Working experience in banks/ Financial service company is a plus

 

Technical/Functional skills

• Proficient in Incident Management and Response

• Have knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, incident management etc.

• Familiar with regulatory guidelines such as SBV’s Circular 18, Cir 35, 47.

• Familiar with security solution such as SIEM, SOAR

• Knowledge of information security controls, guidelines and standards, ISO, CIS, NIST, OWASP is the plus.

• Familiar/ Experience in penetration testing.

 

Personal skills

• Delivers Result

• Builds Relationships

• Security mindset

• Inquisitive approach and Inquisitive approach and attention to detail attention to detail

• Good command of English

About Us

With operations that span 15 different markets across the region, the opportunity to expand your experience, test your capabilities, and exhibit your resilience is ample.  #teamCIMB  is always keen to welcome the ones who are ready to make that very special difference – for themselves and the bank.The primary role of the position is to support to: • Protect the bank's critical assets against any kind of threat and establishing security measures around key assets of an organization • Strengthen the castle walls to prevent intruder to compromise the defenses • Support investigations and incident management to aid the speedy resolution and mitigation of the cyber risk • Provide coordination with operational team to response in security threats & re-act to protect bank assets