Responsibilities for all IT Cyber Security area within the company, keep maintenance company’s data and system in safe condition.
Performance for IT infrastructure / Security projects as assigned by the IT Management.
Be well trained on IT Cyber Security parts to company users and Partner as well.
Report online activities results to IT Management.
Key Tasks:
Monitoring for abnormalities activities in the systems both network and server via log reviewing, analyze, conclude and resolve.
Monitoring for Endpoint protection activities such as Antimalware, Full Disk Encryption, ransomware etc. for the compliances follow to resolve the non-comply issue.
Performing vulnerability scanning, testing, risk analyses, assessments and treatment plan; coordinate with related parties for consulting on remediation.
Performing penetration testing on company’s applications, network devices, servers and other systems in production and development environments.
Threat Intelligence and Information Intelligence to foresee the potential impact may happen to systems and company reputation.
Maintaining and improving the data protection, network security and endpoint security strategies, ensure the security controls are effective and efficient.
Developing & maintaining the security baseline for Pizza Hut systems and endpoints based on well-known standards.
Conducting security awareness campaigns such as phishing, security workshop, seminar to raise employee awareness.
Incident handling follows the company incident management process, investigating the incident, collecting logs and coming up with incident reports to Security Prime.
Coordinating with related parties to resolve the identified security issues Qualifications
Conducting annual IT audit with both Group audit and Third Party audit.
Maintenance IT Security policies is up to date.
Working with Group IT for any IT Security project.
Training Cyber security for users if any.
* Benefit package:
Hybrid Work Policy
13th month salary + KPI bonus
16 days annual leave + 6 paid sick leave
PVI Healthcare extra
Learning & Training opportunity
Caring policies, supportive and employee-centric work environment
Engagement Activities
Yêu Cầu Công Việc
Education / Training Qualifications:
Bachelor’s degree in Computer Science related field or equivalent work experience.
Security certificate: CEH, OSCP or other equivalent or higher certificates is an advantage.
IT certificate: MCSE, LPI, CCNA, CCNP is also a plus.
Experience:
Minimum of (3) years of experience in the IT Security area in a medium / enterprise level.
Having experience on Information and Cyber Security Management is a must.
Having a good knowledge of Security Offensive to put defense strategy in the most efficient way.
Familiar with cybersecurity technologies and tools such as: Next-gen firewall, Nessus, N-IDS/H-IDS, Cloud infrastructure, SIEM, Kali Linux tools set, IoT, etc. is a plus.
Familiar with cyber security threat hunting such as: OSINT, Shodan, Censys, Spiderfoot.
Having experience on manage a large WAN network.
Experience for the annual security auditing.
Having knowledge and experience working in a company follow ISO 27001 standards.
Knowledge / Skills / Personalities:
Having knowledge of SOC2, GDPR, CSA (Cloud), HIPAA, PCI-DSS is an advantage.
Demonstrate ability to work independently and as part of a team to achieve team goals.
Ability to conduct and direct research into IT/Security issues and solutions as required.
Demonstrate strong organizational skills, including time management and ability to prioritize and manage a range of tasks pro-actively.
Demonstrate good logical thinking and problem-solving skills.
Ability to effectively prioritize, take ownership and execute tasks in a high-pressure environment.
Highly motivated, self-directed.
Hands-on, possess a high energy level and good team player.
Being self motivated and flexible.
Good at English in communication skills including oral and written.
