FWD VTC

Tóm tắt công việc

As a Cyber Security Manager, you will be responsible for the following tasks:

• Support the Head of IT Security Engineering in define and maintain the IT Security Engineering framework for FWD Group.
• Drive awareness and support to Group IT Security, Group IT and Business Units IT, to understand the IT Security Solutions and Processes, as well as their implications across the organization.
• Drive IT Security Engineering Initiatives and Projects definition and implementation, selection of solutions and architecture, as well as define operations framework and its continuous improvement.
• Partner with the Head of IT Security Engineering and Group CISO, through tracking and reporting function, to ensure regular updates to management on the IT Security Engineering Program and risks 

Must have:

• Minimum 8 years working experience in IT Security Management role, preferably in Financial Services.
• Regional experience in IT Security Technical or Engineering roles.
• Degree from Information Technology or equivalent discipline.
• Technical experience in Identify, Protect, Detect, Response or Recover areas.
• A robust grasp of cloud security best practices, principles, and patterns. This should include knowledge of the Shared Responsibility Model and an understanding of how it impacts security posture.
• In-depth knowledge of at least one major cloud service provider (e.g., AWS, Azure, GCP) with a comprehensive understanding of their service offerings, architecture, and security controls.
• Experience with scripting and automation tools to streamline security operations.
• Excellent interpersonal and influential skills to enable the implementation and enforcement of the IT Security Engineering program.
• Good English communication and presentation skills.

Degrees & Certifications:

• Cloud security-related certifications such as Certified Information Systems Security Professional (CISSP),
• Certified Cloud Security Professional (CCSP), or any cloud provider-specific security certifications.

Nice to have:

• Knowledge of vulnerability scanning tools and techniques, as well as experience with the remediation of identified vulnerabilities.
• Knowledge of cloud networking constructs, security groups, network ACLs, and other network security methodologies.