Principal Security Architect

Job Description:

Security Requirements: Create and maintain security architecture requirements, standards, blueprints, and patterns. Review and approve low- level design documentation.
Project Involvement: Review IT Security feedback on business cases, participate in solution design discussions, and ensure high- level designs address security risks.
Compliance: Ensure adherence to Information Security policies and standards, author/review such policies annually, and manage complex integration issues across multiple vendors..
Risk Management: Liaise with business and IT stakeholders to clearly communicate and treat risks, ensuring compliance with security standards.
Change Management: Serve as a key member of the Change Advisory Board, ensuring compliance with security standards during changes and emergency implementations.
Leadership & Strategy: Contribute to the Information Security strategy, provide education and awareness on security standards, and support Mergers, Acquisitions, and Divestment (MAD) activities.
Collaboration: Collaborate with Cybersecurity stakeholders (e.g., Cyber Risk Management, Security Engineering) to ensure timely and high- quality execution of security activities.
Testing & Verification: Facilitate penetration testing activities, ensure proper scoping and communication of results, and verify that security activities meet requirements.
Design & Implementation: Design and assist in the implementation of network and computer security. Maintain and enforce security standards, blueprints, and patterns.

Required skills/Experience:
Technical Expertise:

Advanced knowledge of encryption protocols, network security, mobile security, and cloud architecture.
Strong understanding of NIST Cybersecurity Framework, NIST Secure Software Development Framework, and threat modeling frameworks (e.g., STRIDE).
Proficiency in frameworks such as TOGAF and/or SABSA.
Strong understanding of layered security and application layer vulnerabilities.

Experience:

Proven problem- solving skills and the ability to work within a multidisciplinary team.
At least 7- 10 years in a security- related role, preferably in a regulated environment.
Experience in presenting security topics at conferences.
Significant experience with risk management methodologies and managing an Information Security Management System (ISMS).

Certifications:

Relevant certifications such as (ISC)2 CISSP, ISACA CISM/CISA/CRISC, SANS GIAC, ISO27k LA/LI.

Soft Skills:

Strong vendor management experience.
Proven ability to drive high security standards across an organization.
Strong communication and report- writing skills, with the ability to relate technical issues to non- technical associates.
Ability to maintain composure under pressure and work calmly during emergencies.

Knowledge:

Familiarity with laws, regulations, industry standards, and guidance related to Data Protection and Information Security.

Additional Skills:

Solid awareness of the current threat landscape and modern solution architectures, incorporating zero- trust principles.
Knowledge of operating systems (Windows, Unix, Mac OS) and cloud service provider technologies.

Language

English proficiency is required.

Years of experiences: At least 7- 10
Working Location: District 12 or Phú Nhuận District

Benefits/ Opportunity:

Having opportunities of being trained oversea and working directly with oversea customer
Technical & Soft skills internal training courses
Competitive salary and bonus.
A stable and rewarding position where your long- term commitment will be highly valued.
Team Building Fund
Many company activities (Sport and music festival, TMA Futsal league ...) are held annually.
Total Health Care Insurance
Loan Fund
Working in an international, dynamic and professional environment with many opportunities to develop career.

Cập nhật gần nhất lúc: 2024-09-08 16:50:03