{"@context":"https://schema.org/","@type":"JobPosting","title":"Senior Information Security Officer","description":"## Mô tả công việc\n\n

Team: Information Security

Division:\tRisk management

Work Location: Ho Chi Minh

Reports to: Head of Information Security

Job summary:

Responsible for implementing, operating, and monitoring application security controls and compliance activities to ensure that enterprise applications are secure, resilient, and compliant with internal policies and external regulatory requirements.

Responsibilities and accountabilities\tApplication Security

-\tImplement and operate application security solutions including WAF, DDoS protection, and PAM (Privileged Access Management).

-\tMonitor privileged access activities, detect abnormal behavior, and escalate security risks.

-\tCollaborate with development and infrastructure teams to ensure security-by-design across the application lifecycle (SDLC/DevSecOps).

-\tSupport application vulnerability assessment activities and track remediation progress.

Compliance & Policy Management

-\tSupport the development, maintenance, and updates of information security policies and procedures.

-\tEnsure compliance with internal security standards and external regulatory requirements (e.g., audit requirements, SSC, Stock Exchange regulations if applicable).

-\tPrepare documentation and reports for internal and external audits.

Security Monitoring & Reporting

-\tMonitor application-related security events and access activities.

-\tAnalyze and report security risks, vulnerabilities, and incidents to management.

-\tTrack remediation status of identified security issues and ensure timely resolution.

Security Awareness & Training

-\tSupport the execution of information security awareness programs for employees.

-\tAssist in developing training materials and communication related to application security best practices.

Project Support & Implementation

-\tParticipate in research, testing, and deployment of new application security solutions.

-\tSupport security-related initiatives in digital transformation and system upgrade projects.

-\tContribute to security requirement definition in IT and business projects.

\n\n## Yêu cầu công việc\n\n

Technical Knowledge

-\tStrong understanding of web application security and OWASP Top 10.

-\tExperience with security tools such as WAF, PAM, DDoS protection, SIEM is an advantage.

-\tKnowledge of SDLC / DevSecOps processes.

-\tFamiliarity with information security standards such as ISO 27001, NIST, CIS and compliance frameworks.

Skills

-\tStrong analytical and problem-solving skills in security incidents and vulnerabilities.

-\tAbility to collaborate with cross-functional teams.

-\tStrong reporting and documentation skills. Detail-oriented with strong logical thinking.

Education & Experience

-\tBachelor’s degree in Information Technology, Computer Science, Information Security, or related fields.

-\t2–5 years of experience in Application Security, Information Security, or IT Security roles.

Preferred Qualifications (Advantage)

-\tCertifications in Application Security (CEH, eWPT, eJPT, BSCP or equivalent).

-\tISO/IEC 27001 Lead Implementer / Lead Auditor or CISA.

-\tSC-300 (Identity & Access Management) certification or IAM/PAM experience.

-\tExperience in banking, securities, fintech, or regulated financial environments.

","datePosted":"2026-07-15","hiringOrganization":{"@type":"Organization"},"employmentType":"onsite"}