Job Purpose

Key Accountabilities (1)

• Participate in projects, develop and deploy technology to ensure information security for the systems to be built, including the following stages: analysis, building information security requirements, information security design, threat modeling, source code review, testing, and building information security control measures
• Research and build necessary information security solutions to prevent information security attacks and incidents, ensuring security and safety for the entire information system of the bank
• Coordinate with the information security monitoring department to participate in handling information security incidents
• Establish and monitor the implementation of TCB's information security processes, regulations, standards, guidelines and policies according to the regulations of the government and international organizations
• Implement and maintain compliance with international standards PCI-DSS, ISO, SWIFT CSP
• Implement and maintain compliance with TCB's policies, information regulations of the State Bank
• Regularly conduct compliance checks and integrity checks of security policy configurations in TCB's internal system to detect violations or internal attacks
• Coordinate with Compliance Assessment and Risk Management units to assess the level of compliance of the technology system according to policies, regulations, standards, procedures, and checklists

Key Accountabilities (2)

Key Relationships - Direct Manager

Key Relationships - Direct Reports

Key Relationships - Internal Stakeholders

Key Relationships - External Stakeholders

Success Profile - Qualification and Experiences

• Graduated from University majoring in IT, Mathematics or Telecommunications
• Have 3-5 years of experience conducting security testing assessments in financial/service/telecommunications organizations.
• Experience includes aspects of:
• Research, design, implementation, and assessment in the field of information security in various areas
• Deploy PCI-DSS, ISO, Swift CSP...
• Participate in the implementation of building and controlling compliance with information security standards for IT systems
• English: According to current regulations of the Bank
• Have experience in assessing information security using the Agile method
• Have information security certificates such as OSCP, PCI DSS assessment implementation certificate