Security Architect

As a Security Architect you&039;d be able to work on and solve some of the many interesting challenges we are facing, learn new ways of working, and build delightful high-quality products for our customers.
We&039;re looking for a Security Architect!
We&039;re a small but growing Digital Bank, with new and exciting problems to solve. Our environment is bleeding edge digital, fully cloud native, with world class advanced technology. We work in project-based sprints in small, interdisciplinary teams.
Job Description
As we are building the core cyber security capabilities for our Digital Bank, the Security Architect will drive the building and run of best-of-breed capabilities and practices in architecting our systems and applications.
We are building a close knit and lean team bringing in modern approaches to security, integrating cloud-native security designs, offensive security, and agile development. Working closely with security engineering and automation, the Security Architect will also work tightly with internal stakeholders (developers, architects, business) to design adaptive controls and ensure a sound security posture and risk reduction.
The Role Responsibility:
Our Digital Venture is set for a rapid growth and rapidly evolutive environment, thus the candidate will be the focal point of security architecture, continuously maintaining and improving control visibility and effectiveness. The role will be set to evolve and grow over time as the company develops.
Not exhaustively, the
Security Architect
will be responsible for:
- Working closely with Product squads, Application Security and End-user Computing to ensure architecture artefacts are established and maintained, deriving adequate control plans adapted to each business context
- Working closely with the group to ensure our Digital Venture meets and exceeds control objective requirements across cyber defence, investigations, incident response and forensics
- Developing project timelines for ongoing system upgrades
- Developing and documenting security architecture designs, patterns and blueprints
- Reviewing current system security measures and recommending and implementing enhancements
- Reviewing the effectiveness of security controls and adherence to regulatory and compliance requirements

Our Ideal Candidate:

Has a solid understanding of security protocols, cryptography, authentication, authorisation and auditing
Is self-driven, forward-looking and proactive in meeting the requirements but also proposing better solutions
Is a master of the relevant tools and engines
Is a technical expert in security architecture, engineering and related areas of expertise
Has experience in IT/security risk management
Is experienced in building cloud environments, including IaaS providers, cloud-native platforms (Kubernetes) and SaaS third-party applications
Has the hands-on expertise to build and support the operational objectives
Is collaborative, with a vision of how to work with developers to embed immutability, anomaly detection, forensics and normal-state resumption in the fabric of the application
Ideally, has experience working in supporting regulated digital payment services such as payment industry & digital banking, or e-commerce services
Has a good understanding of DevOps and CI/CD pipelines in a context of security and compliance guardrails
Has good working knowledge of current IT risks and experience implementing security solutions
Is experienced in implementing multi-factor authentication, single sign-on, identity management or related technologies
Understands and can articulate the risk of missing controls and need for operational visibility
Has excellent written and verbal communication skills as well as business acumen and a commercial outlook

HR benefits

Parking: GFT covers the monthly parking fee for employee motorbikes
Salary band per level and employee benefits are reviewed once per year
13th month salary pro rata depending on the employee’s length of service (within a calender year), paid with the December salary
Monthly lunch allowance: 700,000 VND/employee
Performance evaluation is once per year, for 2 purposes: > Performance bonus > Salary increments
Competitive salary

Talent retention policy
(Retention bonus)

3-year anniversary = 1x monthly salary
2-year anniversary = 0.5x monthly salary
Paid with salary of month of anniversary.
5-year anniversary = 2x monthly salary

Health care

Annual health check-ups.
Optical: expense claim for eyewear
Private health insurance: including accident, outpatient, in-patient, maternity, and dental for all permanent employees who pass 2-month probation.

Vacation

Adding one more annual leave day for each two-year anniversary.
Maximum 18-day vacation leave/year (with the ability to carry over 05 days till 31st March of the following year)

Healthy lifestyle

Range of healthy snacks, tea, coffee, milk and beer on tap:> Tea, coffee and milk are available at pantry area – WeWork> Beer is available at pantry area – WeWork> Snack is available in GFT office.
Sports and hobby clubs: company has an annual fund for fitness activities, which is allocated per month as team’s vote.

Social

Hackathon: once per year
Company townhall: each 6 weeks
Monthly team engagement activities: one activity per month
CSR activities: as per company’s CSR guideline and practice
Monthly team lunch at restaurants
Onsite tour/training courses at other GFT offices and client’s destination overseas (where applicable).

Cập nhật gần nhất lúc: 2023-01-07 11:52:05