IT Security Governance Specialist – ID5748

1. Cybersecurity risk and compliance framework and management:

• Work with VPB Risk Division to develop and adopt risk management framework.
• Perform the role of Cybersecurity Advisory to new and existing systems to reduce cybersecurity risks on a regular basis.
• Produce cybersecurity requirements for all systems to protect and reduce the cybersecurity risk for the Bank.
• Ensure that third party risks are managed
• Manage the relevant stakeholders so that they understand the risks and be guided in making the right risk decisions for the Bank.
• Ensure all Cybersecurity Risk are recorded, tracked and addressed in the agreed timeline.
• Ensure that the IT Security services are effectively implemented

2. Cybersecurity Policy & Standards   

• Ensure that Cybersecurity Policies and Standards are aligned to SBV requirements and the desired cybersecurity posture of the Bank.
• Co-ordinate with other teams to develop technical policies, standards, procedures align with VPB Cybersecurity requirements.
• Develop guidelines to provide directions to stakeholders.

3. Cybersecurity Awareness    

• Ensure that the Awareness program is implemented effectively.
• Review and update the Awareness program to ensure relevancy to the current cybersecurity threats.
• Engage the target audience with the relevant cybersecurity materials and methods to instill a cybersecurity mindset. 

4.Reporting and Administration    

• Control approves the request/changes related to security, control activities of IT security: implementing, operating, vulnerabilities management
• Work with both internal/external audit during audit programs
• Collect, analyze and produce report for IT Security every month    

5. Leadership    

• Demonstrate and guide the team to achieving the cybersecurity goals to secure the Bank.
• Develop the team members to ensure that their skills meet the requirements of Business initiatives

6. Projects   

Build up the cybersecurity capabilities to strengthen the cybersecurity posture of the Bank

•    3 years or more of working experience in IT/IT security banking, good knowledge international IT security standards (ISO 270001, PCI-DSS…), ITIL
•    Have good knowledge about: SBV regulation, risk management best practice.
•    Have basic IT Security technical knowledge: Security controls for network, system, application, identity management.
•    Knowledge for cybersecurity management framework: NIST, CIS.. is preferred.
•    Have experience on IT security related procedure, process, policy, regulation development, reviewing, and updating.

•    Have ability to read and understand the professional documents in English.    
•    Strong interpersonal and communication skill
•    Be able to well develop, present the report is preferred.
•    Be able to catch up and manage work quickly and effectively.
•    Be able to work independently with high pressure, good in teamwork.
•    Careful, responsible, and secure in protecting information/data belong to Bank 
•    Good knowledge of risk management principles, methodology and practice    
•    Preferred Fluent in English