Security Auditor

1. VNG ISMS & SOX Management

• Maintain and update VNG ISMS & SOX documents.
• Ensure in-scope departments are well complied with ISMS & SOX rules.
• Update and manage security awareness training programs.
• Ensure vendors’ profiles are assessed and managed accordingly to third party risk management framework.

2. IS Processes

• Support Leader to draft out IS, ITGC/ITAC processes.
• Help oversea the implementation of IS, ITGC/ITAC processes.

3. Universal IS Risk Management

• Maintain and update VNG’s universal IS risk management framework annually.
• Ensure Risk Portal can support well key users.
• Work on identification, analysis and treatment of risks.
• Update control’s effectiveness, non-conformity and report on risk situation.

4. Compliance Management

• Support VNG’s products to comply with SOX 404, ISO 27001, PCIDSS, SOC 2 controls
• Collaborate with technical departments to implement certificates’ requirements
• Support Leader in the implementation of data governance/management programs.

Information Systems

• Good business analysis skillset.
• Understanding in architecture (system, network and data).
• Understanding of concepts in business statistics, able to apply well statistics concepts into data analysis and analytics projects.
• Good project management capabilities, able to manage his/er own works and the works of his/er associates.

Information Security

• Understanding of Operating system included Linux (distros)/Windows.
• Understanding of Network infrastructure.
• Previous experience with Python usage.

GRC

• Understanding of security standards/regulations (PCIDSS, ISO27K,etc.).
• Previous experience and ability to define/enhance information systems auditing, monitoring, controlling, and assessment processes.
• Ability to develop security policies, standards and guidelines based on best practices and industry standards.

Interpersonal skills

• Be proactive and possess decent critical thinking and problem solving skills

• Bằng cấp: Đại học
• Độ tuổi: Không giới hạn tuổi
• Hình thức: Nhân viên chính thức