IT Security Lead

*Division Purpose
- The Transformation Office is responsible for the execution of the Bank’s transformation vision, strategy and roadmap of deliverables with a focus on digitalization of customer journeys.
- The Transformation Office executes the portfolio of projects / initiatives pre-dominantly through an Agile methodology (some foundational projects will still follow the Waterfall method)
- The Transformation Office houses a variety of expertise to support the execution of the portfolio of projects/ initiatives such as technology, data analysis, risk modelling, design thinking, change management and digital partnerships amongst others.
- The Transformation Office tracks and measures the progress of the execution using modern portfolio management techniques (example, OKRs and TTIs) to ensure value is created.
*Tribe Purpose
- The Technology Tribe will support the business by building solutions required to deliver on the bank's digital strategy.
- The Technology Tribe will advise and design solutions based on requirements from and feasibilities of other tribes, develop solutions based on the architecture blueprint while ensuring quality assurance throughout the development and execution of solutions.
- The Technology Tribe will be equipped with forefront programming skills and knowledge of digital technologies so as to be able to provide innovative design solutions and advice on improvements needed to meet business needs
*Job Purpose
- The job holder will be hand on and design, implement and enhance measures and controls for all of Cyber security matters for Transformation Office activities.
- The job holder will engage in the world of risk management and mitigation.
- The job holder is responsible for coaching and mentoring all Security specialists and other Technical staffs, and being a role model for modern Security architect, cloud oriented aproach and best in class practices.
*Key Relationships
- Reports to Architect Lead.
- Direct reports include IT Security Engineers.
- Internal stakeholders include members of Transformation Office, Technology Division and other relevant departments in Techcombank.
- External stakeholders include partners providing professional services.
*RESPONSIBILITIES:
A. Security
-Develop and implement strategy and operation plan that is in line with Business strategy and the Bankwide compliance.
-Develop and control the implementation, compliance with policies, standards, regulations - standards, procedures, guidelines – information security template of technology throughout Transformation Office.
-Be a critical resource for our engineering teams on all manner of security matters
-Work side-by-side with Architects, Developers and Delivery Leads alike while addressing security concerns
-Make architectural decisions critical to our products
-Survey the backlog of Tribes, prioritize appropriately, and shepherd solutions through with persistence
-Develop human resource plan, coordinating human resources, developing assigning mechanism, recording and evaluating the work efficiency of employees, ensuring quantity and quality of resources in the unit.
-Organize training, job orientation for employees, build human resource for the unit.
-Communication and orientation for staff follow the guidelines and development orie ntation of the system.
-Be accountable for the successful delivery of solutions to support the bank's digital strategy and in ensuring end-to-end quality, safety for the products to be delivered.
-Work closely with other tribe leads and the senior leadership team to develop and deliver best in class Security standards and practices for the bank, while building a high performance culture within the tribe through effective people and project management leadership.
B. Managing Projects
-Oversee coordination and delivery of products across squads and ensure timely delivery of products in accordance to timeline set.
-Monitor and evaluate successful implementation of products while developing enhancements based on implementation results/responses.
-Design and set product development priorities with evaluation and inputs from Business and Data Tribes, ensuring products are delivered at the speed of markets .
C. Managing Stakeholders
-Manage strategic relationships with other tribes and squads, ensuring that overall business objectives are being achieved through the translation of strategic plans into operational plans and guiding the execution of said plans.
D. Managing Talent
-Attract, motivate and retain employees across all levels for a high performance culture
-Develop and coach more junior employees to identify gaps in their competencies and build development plans and push tribe members to keep updated on new technologies and digital experiences so they can develop innovative solutions for the digital bank.

*EXPERTISE & EXPERIENCE, QUALIFICATIONS & PERSONAL ATTRIBUTES:
Domain Expertise
-7+ years experience to include a combination of the following:
-Application development experience with the full Software Development Lifecycle
-Application security/software security
-Creating and delivering creative solutions to complex problems
-Knowledge of application security practices, including the areas of platform architecture, application security modeling, and systems integrity
- Knowledgeable about the tools used to build an Application Security program
-Knowledgeable about secure development life-cycle, threat modeling, and web application security assessments.
-Deep experience working on Cloud Security Architect.
-Experience working with DevSecOps tools is a must (RE protection, SSL pinning, payload encryption, Code quality, source code analysis,..)
-Experience working with security tools (network monitor, encryption, web vulnerability scanning, penetration..)
-Experience automating security tests into the development process
-Understanding of common authentication and authorization methodologies
Agile / Digital Experience
-Proven track-record in leading company-wide digital transformation initiatives and change management
-Mastery in Agile Software Development and is an industry expert on Agile methodology and practices
Qualifications
-Bachelor's degree in computer science, software engineering or information technology
Personal Attributes
-Passionate about technology and excited about the impact of emerging/disruptive technologies
-Wants to unleash inner self-starter and work in an environment that fosters entrepreneurial minds
-Believes in a non-hierarchical culture of collaboration, transparency and trust across the team
-Openness to new ideas and desire to develop them together
-High-energy and passionate outlook to the role and can influence those around her/him
*COMPETENCIES:
To succeed in this role, the job holder is expected to strengthen and demonstrate these core skills and behaviors:
+ Digital Literacy:
Introduces and integrates new digital tools at the workplace to ease operations and ensures that technology is adequate to achieve business objectives.
+ Agility and Innovation:
Responds quickly to changing business requirements by creating new solutions and supporting Agile ways of working.
+ Impactful Communication:
Guides others on the techniques for impactful communication (verbal and written) to different stakeholder levels.
+ Influencing and Negotiation:
Demonstrates ability to express viewpoints with appropriate facts and business cases.
+ Development Orientation:
Takes ownership for self-development and proactively identifies and shares new learning opportunities with others.
+ Problem Solving:
Creates options for identified problems and recommends the best possible solution based on available information.
+ Thinking:
analyzes in a logical and systematic way.
+ Business acumen:
Identifies opportunities and challenges from changes in business environment and guides others to leverage changes and achieve business goals.
+ Financial acumen:
Understands direct and indirect financial impact of own project and how it is linked with the company's financial metrics
+ Strategic Orientation:
Understands role's contribution to overall strategy and focuses on achievement of long-term goals along with immediate goals.
+Application Architecture:
Understands the interaction of applications and can execute architecture plan.
+ Cybersecurity:
Audits the cybersecurity policies and procedures to ensure protection against cybersecurity risks and vulnerabilities.
+ Programming:
Understand advanced featured of programing languages used by the squad and be able to research, develop, code complicated program and act as advisor for Jr. employee on training.
+ Quality Orientation:
Ensures the quality of developed product, guiding Jr. employee on quality audit and grades them against pre-set standards.
+ Software Configuration:
Sets up and suggest ideal about deployment platform and managing changes/updates introduced to solutions by controlling the deployment release in a systematic manner
+ Systematic Thinking:
Visualizes & understands thoroughly overall designed structure and how each components contribute to the overall system.
+ Technology Application:
Keeps updated on advanced technology and integrates it to create an efficient system for the organization.
+ Customer Centricity:
-Seeks the solution that proactively meets client's needs
-Perform work beyond their scope of responsibilities to solve issue for customer
-Looks for ways to increase customer satisfaction
+ Innovation and Creativeness:
-Looks for ways to overcome obstacles on the way of reaching the objective
-Proposes new solution for current tasks
-Initiates improvements in working practices of a department he/she is working in
+ Collaboration for Common Objectives:
-Engages colleagues in working together/joint work
-Accepts feedback in a constructive way and corrects his/her behavior accordingly
-Speaks sincerely on current problems in his/her work and encourages other to do so
+ Self - Development:
-Studies new fields/technologies even if they are not related to his/her work directly but which can contribute to organizational development
-Sets himself/herself goals for career development
-Improves his/her professional knowledge and skills
+ Work Efficiency:
-Complies with Code of Conduct and standards of Techcombank
-Organizes his/her work to perform it consistently and without emergencies
-Uses the resources available with rationality