We use essential technologies to keep Swiftcruit secure and running. With your permission, we also use analytics and marketing technologies to understand usage and improve the product. You can change this anytime from Cookie Settings in the footer. Read our Cookie Policy.
Information Security Manager at fastretailing | Swiftcruit
USD 80,000 - 120,000|Onsite |Senior Level|Full Time
Posted: May 14
Skills
Information Security GovernanceRisk ManagementCompliancePCIData PrivacyISO 27001ISO 27701CISACISMCISSPCyber Threat Analysis
Company Location
UQ Head office Vietnam, Vietnam
Remote Work Policy
Onsite
* Note: This is individual contributor
Job Description
Handling Information Security Management, address the information security threats and incidents and drive remediation.
In conjunction with the Legal team Identify information management and protection laws and regulations and implement actions to ensure compliance with relevant information management and protection laws.
Identify, track and oversee internal and external compliance and regulatory requirements (PCI, Data Privacy, etc.) for the organization including compliance with established policies, procedures, standards, baselines and controls.
Maintain an information management and protection framework for an effective company-wide governance program.
Manage information security awareness programs and provide training to all staff on a basis.
Manage day-to-day security activities, including conducting vendor security assessment, privacy security assessment, implementing company policies, and communication related to the information security program.
Manage and Support the Information Security requirements across different BUs.
Support other local ISO members in different regions as a regional ISO team member.
Job Requirements
Bachelor’s degree or Master’s degree in IT, Security or Computer Science or equivalent major
Minimum 5 to 10 years of experience in information security governance, risk and compliance.
English: Business level (written & verbal). IELTS 6.5+ or equivalent Certificate is preferrable.
Excellent communication and interpersonal skills to interact with individuals at all levels of the organization.
Strong knowledge and Experience in information risk assessment and compliance needs.
Strong knowledge and Experience in information security frameworks.
Strong knowledge and Experience in applicable laws, regulations, and standards relating to security and data privacy.
Good understanding of information security governance frameworks such as ISO27001 (and ISO27701 framework, etc.,)
Demonstrated ability to develop and implement security policies, procedures and programs.
Understanding and ability of risk analysis for cyber threats. (Preferred)
