Senior Security Risk Analyst

Công Ty Cổ Phần VNG

Visualizza: 142

Giorno di aggiornamento: 04-05-2024

Località: Ho Chi Minh

Categoria: IT - Software

Posizione: Nhân viên

Stipendio: Cạnh tranh

Educazione: Đại học

Esperienza: 4 - 8 Năm

Sesso: Nam

Đang tải ...

Descrizione del lavoro

Responsibility Overview:

Security Risk Management:

  • Coordinate the regular updating and enhancement of VNGs Information Security Management System (ISMS) documentation.
  • Safeguard the compliance of in-scope departments with established ISMS rules and regulations.
  • Create, manage, and update security awareness training programs to promote a culture of safety.
  • Assess and manage vendor profiles in accordance with our third-party risk management framework.
  • Lead periodic Information and Communication Protection (ICP) and Business Continuity Planning (BCP) tests.

Information Security (IS) Processes:

  • Collaborate with team leaders to develop, review, and refine comprehensive information security processes.
  • Supervise and ensure the successful implementation of IS processes across relevant departments.

Universal IS Risk Management:

  • Maintain and annually update VNGs universal IS risk management framework.
  • Ensure the Risk Portal adequately supports key users.
  • Identify, analyze, and implement treatment plans for various security risks.
  • Regularly review and update control effectiveness, non-conformity, and risk reports.

Compliance Management:

  • Assist VNGs products in acquiring IS-related certificates, such as ISO 27001, PCI DSS, etc.
  • Collaborate with technical departments to implement certificates requirements.
  • Support the Leader in implementing data governance and management programs.
  • Conduct regular IT Internal Audits, including planning, executing, and reporting on findings.

Requisiti di lavoro

Qualifications and Skills:

Information Systems:

  • Proven business analysis skills.
  • Understanding of architecture, including systems, network, and data.
  • Proficient in business statistics and its application in data analysis and analytics projects.
  • Demonstrated project management capabilities, with the ability to manage personal tasks and those of associates.

Information Security:

  • Proficient understanding of operating systems, including Linux distributions and Windows.
  • Familiarity with network infrastructure.
  • Previous experience with Python usage.

Governance, Risk, and Compliance (GRC):

  • Understanding of security standards/regulations like PCIDSS, ISO27000 series, etc.
  • Prior experience and ability to define/enhance information systems auditing, monitoring, controlling, and assessment processes.
  • Ability to develop security policies, standards, and guidelines based on best practices and industry standards.

Interpersonal Skills:

  • Proactive and possess critical thinking and problem-solving skills.

Experience:

  • At least 4 years of experience working in Information Systems, Business Analysis, GRC, or IT consulting.

Why join us?

  • Variety: The role offers diverse responsibilities, making it ideal for someone who enjoys multitasking and tackling challenges.
  • Skill Enhancement: The position provides opportunities to strengthen a wide array of skills, including business analysis, project management, and understanding of security standards.
  • Impact: Youll make a significant contribution to improving VNGs overall security posture, playing a crucial role in the organizations resilience against risks and threats.
  • Professional Growth: VNG supports the continuous professional development of its employees, offering numerous opportunities for growth and advancement in the dynamic field of information security.
  • Culture: VNG has a vibrant, proactive culture that encourages critical thinking, making it an exciting and rewarding place to work.

Beneficio del lavoro

  • Laptop
  • Chế độ bảo hiểm
  • Du Lịch
  • Phụ cấp
  • Chế độ thưởng
  • Chăm sóc sức khỏe
  • Đào tạo
  • Tăng lương
  • Công tác phí
  • Phụ cấp thâm niên
  • Nghỉ phép năm
  • CLB thể thao
Đang tải ...

Scadenza: 03-06-2024

Clicca per candidarti per un candidato gratuito

Applicare

Đang tải ...
Đang tải ...

LAVORI SIMILI

Đang tải ...
Đang tải ...