[HO] IT COMPLIANCE

• Perform an information security audit for all branches / TOs.

• Review / update Security Policy in accordance with new procedure/ process of our bank or new regulation of State Bank of Vietnam / Information Security Division of Mother bank

• Cooperate with Compliance Dept. for regulation advice.

• Support other Departments for checking policy of Information Security.

• Create State bank’s report or other report relating to Information Security Job.

• Organize and catalog audit repositories for annual assessments: ISO/IEC 27001, ISO/IEC 27701, and PCI-DSS.

• Perform other related duties as assigned.

• Organize and catalog audit repositories for annual assessments: ISO/IEC 27001, ISO/IEC 27701, and PCI-DSS.

• Assist in scheduling audit interviews with internal and external auditors (QSA, certification bodies). Authority

• Assist in tracking employee completion of annual security awareness training.

Education: Bachelor’s degree in Information Technology, Information Security, Computer Science Experience

• At least 2 years’ experience in relevant fields Knowledge, Skill & Abilities

• Creative, reliable, hardworking, time managing, teamwork

• Problem Solving/Analytical skill

• Initiative

• Have background in Cyber-Security frameworks such as ISO 27001, ISO 27701, PCI-DSS, NIST Cyber Security Framework.

• Basic understanding of IT concepts: networking fundamentals (firewalls, subnets), operating systems, databases, and Identity & Access Management (IAM).

• Familiarity with the concepts of Information Security (Confidentiality, Integrity, Availability) Degree, Certificate

• ISO 27001 Lead Auditor

• Foundations / Fundamentals certificates: CompTIA Security+, ISACA ITCA, or entry-level ISO 27001 awareness / internal auditor training