Job description:Job Description
- Supervise team in developing and maintaining the organization's overall cyber security strategy and roadmap, including risk assessment and mitigation plans.
- Monitor daily/weekly operations and enforce security policies, standards, and procedures to ensure compliance with industry regulations and best practices.
- Develop workplan and design security architecture for Bank (Enterprise Security Architecture), define standards and requirements for information technology security as well as setting a standard framework for various technologies such as Cloud, Biometric Technology, etc.
- Recommend and provide advice on work systems and IT security projects, including evaluating security risks if the work system cannot be developed to meet information technology security needs.
- Supervise and assess security risks for information systems provided by external service providers (Outsourcing) or there is a connection to an external service provider (Third-Party).
- Supervise and perform security assessments and review work systems and information technology security before the systems are put into actual production in the change management process.
- Initiate and enhance the security level of the software development process (SDLC) by applying DevSecOps technology to connect with the development of various bank applications.
- Supervise and review standards or recommendations for various information technologies used by the bank to apply as a guideline for configuring the technological security of various systems.
- Stay current with emerging security threats, technologies, and best practices to adapt security strategies as needed.