Information Security Expert (IAM/Third Party) - HN&HCMC - TA165

• Manages the build & implement URM, CAR program & trainning, build team & develop people/process/guide line for this areas
• Manages the development and delivery of identity and access management (IAM) product's security standards and best practices to ensure information systems security across the enterprise.
• Manages and participates in the planning and implementation for IAM projects.
• Responsible for evaluation and selection of IAM security applications and systems.
• Recommends and implements changes to work methods and procedures to make them more effective or to strengthen security measures.
• Ensures that the IAM Team functions in accordance with the Bank’s policy and procedures.
• Ensure that the Applications complies with the IAM requirements.
• Ensure that Third Parties and Vendor complies the Information Security Policy and Procedures

1. Trình độ đào tạo

        Educational Qualifications

• Bachelor's or Technical Degree Required (IT, Cryptography, computer science, information systems, business administration or other industry-related curriculum)
• Has appropriate subject matter expertise in their area of information security specialisation

2 .Kiến thức/ Chuyên môn cần có

       Relevant Knowledge/ Expertise

• 5 years or more of working experience in IT security banking, good knowledge international IT security standards (ISO 270001, PCI-DSS), ITIL
• Experience working in or with Identity & Access Management
• Familiarity and experience working with enterprise access management solutions such as SailPoint, Secret Server, CyberArk, AD Manager highly desired
• Have experience in managing teams or people
• Experience managing product roadmaps and enhancements through the full development life cycle desired
• Knowledge of common information security management frameworks such a NIST a plus
• Extensive experience working with a diverse range of data sources/streams and managing these effectively
• Strong background in information security operations, process, solutions and technologies
• Strong understanding of policy, compliance, and best practice security principles
• Knowledge of Linux, Windows, and/or Network Operating Systems a plus
• Knowledge of infrastructure, key processes, and technology-oriented risk issues, specifically around security and privacy
• Proficiency in product management
• Proficiency in developing partnership-oriented relationships with internal and external business executives and functional leaders
• Proficiency at multitasking in a fast-paced environment with focus on timeliness, documentation, and communications with peers and business users alike.
• Experienced in implementing ISO27000/PCI-DSS is preferred

3. Các kỹ năng/ Skills cần có

• Have ability to read and understand the professional documents in English.          
• Strong interpersonal and communication skill
• Be able to catch up and manage works quickly and effectively
• Be able to work independently with high pressure, good in teamwork
• Careful, responsible, and secure in protecting information/data belong to Bank
• Good knowledge of risk management principles, methodology and practice        
• Preferred Fluent in English        

4. Các năng lực liên quan khác

• Strong Logical Thinker and Planner
• Management, Leading ability
• Implementation and Deliver ability 
• Excellent analytical, decision-making, and problem-solving skills