Mô tả công việc

JOB PURPOSE: 

Support IT QA & Governance Department at Dai-ichi Life Vietnam to manage the following

• Information Security Projects and Initiatives
• IT Governance which includes activities to ensure alignment between Technology operation and Corporate Policies, Directives and Operational Guideline, manage IT Document and other projects from Regional and Global HQ.
• IT Risk Management by identifying, assessing, and monitoring IT Risks in DLVN Technology environment
• IT Compliance by periodically reviewing and assessing internal controls.

This position also requires the interactions and communications with internal stakeholders (other departments, divisions) and external stakeholders (Regional/ Group headquarter, service providers, vendors)

 ACCOUNTABILITIES

RISK MANAGEMENT & COMPLIANCE (65%)

1. Identify areas of risk, opportunities for process quality improvement, and makes recommendations for quality improvement to QA Manger.
2. Ensure Compliance to Policies, Directives and Operational Guidelines by performing internal assessments.
3. Perform Periodic Review and Assessment of Risks, Deviation from Standards and Processes.
4. Support the Head of IT QA & Governance on Information Security and IT Governance projects and Initiatives.

QUALITY ASSURANCE & SECURITY (35%)

1. Coordinate and manage the audit projects (Internal, External, Regional and Group)
2. Work with Department Heads to build up and document IT Policies, Standards and Procedures.
3. Enforce and maintain the IT Policies, Procedures, Guideline, Standards and taking appropriate actions for non-compliance of policies and procedures.
4. Establish and Manage IT documents (Policies, Procedures, Guideline, Standards) in alignment to Corporate Policies and Directives.
5. Support Head of IT QA & Governance on other assigned tasks.

Yêu cầu công việc

• Bachelor or Master degree in Information Technology, Computer Science, Management Information System or equivalent
• Minimum of 5+ years of experience in IT Governance, Risk, Compliance and/or Cybersecurity
• Experience in building and interpreting policies, procedures, and processes for ensuring compliance with cybersecurity policies
• Experience in performing or directly supporting risk assessment, audit project, security assessment (internal and external)
• Strong understanding of security governance, compliance and risk management principles
• Good knowledge and experience of implementing common the information security and risk related frameworks such as ISO27001, NIST CSF, CoBIT, GDPR, PCI DSS
• Good knowledge and/or experience of security technologies such as Endpoint Security, SIEM, PAM, IPS/IDS, MDM, Web proxy, Vulnerability Assessment, Penetration Testing.
• Knowledge of web/mobile application security and/or security incident management is an advantage
• Experience in Project Management, Data Governance/ Analytics is an advantage
• Professional certification such as CISM, CRISC, CISA, CISSP is an advantage
• Proven strong oral and written communication / presentation skills to a broad range of employees
• Enthusiastic about learning and willing to research
• Highly motivated, self-starting individual with ability to multi-task and manage to timelines with limited supervision in a fast paced and agile environment
• Strong interpersonal skills that establish and sustain close working relationships with interpersonal skills that establish and sustain close working relationships with IT departments and other divisions

• High responsibility and enthusiasm, discipline, supportive mindset