ISMS Member

Job Description

• Ensure a formal set of processes is in place by which the organization can identify various security concerns, gaps and remedial actions to ensure the security of the operations;
• Lead, plan, direct and control the activities of the quality assurance and compliance of all IT services.
• Design, deliver and maintain the organization knowledge management strategy, processes and procedures to ensure relevant information is collated, recorded, organized and shared across all enterprise IT.

Responsibility
For this position, minimum works are as follows,
• Manage the implementation of IT risk management frameworks and processes.
• Develop and m Weekly/Monthly IT Security Metrics achieve the required threshold.
• Lead risk assurance and review activities. Where gaps or weaknesses are identified, propose practical recommendations to enhance the management of the IT risks.
• Support and contribute to the preparation and execution of work plans (including risk assessments) and audit programs for Internal Audit engagements and reviews.
• Measure and monitor quality and ensure compliance to quality standards for all IT services
• Maintain policies, standards and procedures to ensure demonstrable regulatory, legal control.
• Enforce security policies and procedures across server rooms, networks, databases and applications
• Ensure security policies / procedures are defined and implemented across business units and processes

Job Qualification

Educational Level:
• University Graduated

Work Experience:
• Min 3 years

Skills:
• Experience on IT security projects, risk assessments and audits;
• Good knowledge of risk areas including regulatory, operational, information, technology risk and industry specific regulations;
• Understanding potential risks, legal and compliance implications;
• Good understanding of common standards such as ISO 27001 (Information Security Management System); PCI DSS.
• Good knowledge of application and infrastructure security control mechanisms;
• Highly developed diagnostic, analytical and conceptual skills to identify and drive creative solutions and practical risk-based strategy and implementation;
• Excellent interpersonal communication, influencing and relationship building skills, including the ability to effectively communicate with a range of people across and external to the organization and in a wide range of cultural and communication contexts.

Contact
Interested candidates should submit a completed Curriculum Vitae/ Resume and Cover Letter (if any) to:
Resource Assurance Incubation Center,
FPT Software Ho Chi Minh Co. Ltd
Contact Person : Ms. Nguyen Thi Kieu Phuong
Email : [email protected]
Website : www.career.fpt-software.com