Senior Information Security Officer at Techcombank

Role overview

Senior Officer, Information Security 3 Job Details | Techcombank

Senior Officer, Information Security 3

Information Technology Division

Tham gia thực hiện các hoạt động quản trị ANTT theo phân công của Giám đốc Quản trị ANTT

1. Chịu trách nhiệm thực hiện và báo cáo các hoạt động quản trị ANTT theo phân công của Giám đốc Quản trị ANTT, bao gồm:

Xây dựng/điều chỉnh và thực thi MTPQ của các hệ thống.

Xây dựng các yêu cầu, biện pháp nhằm kiểm soát truy cập và bảo vệ dữ liệu của ngân hàng.

Xây dựng, duy trì, tối ưu chính sách/tập luật/cấu hình ANTT cho các giải pháp đảm bảo ANTT như: Các giải pháp ANTT về quản lý định danh truy cập (PAM, IAM…); Các giải pháp ANTT về mạng lưới (Firewall, NAC, APT, NetIPS, DDOS…); Các giải pháp ANTT về thiết bị đầu cuối (AD GPO, HIPS/HFW, Appcontrol, Web/mail filtering, DB security…); Các giải pháp ANTT về dữ liệu (DLP, FAM…).

+ Công tác thực thi phân quyền đảm bảo tuân thủ theo ma trận phân quyền.

+ Công tác cấp phát, thu hồi tài khoản đặc quyền và chứng thư số trên các hệ thống công nghệ.

+ Các yêu cầu ngoại lệ liên quan đến định danh, quyền truy cập trên các hệ thống công nghệ

+ Các yêu cầu thay đổi trên các giải pháp đảm bảo ANTT.

Responsibilities

• Develop and maintain permission matrices, access-control requirements and data-protection measures for bank systems.
• Configure and optimize identity and privileged-access controls, network defenses, endpoint protections and data-security tools.
• Review account and certificate provisioning or revocation, privileged access, exceptions and changes to security solutions.
• Identify operational risks, meet bank policies and work with relevant units on internal and external audit findings.

Qualifications

• University degree in IT, electronics, telecommunications or a related subject.
• Four to five years of in-depth security policy, rule-set or platform operation in finance, services or telecommunications.
• Experience in at least one area such as PAM/IAM, firewalls/NAC/IPS/DDoS, endpoint controls or DLP/FAM.
• Vendor security certifications from providers such as Microsoft, Cisco, Palo Alto or Check Point are listed; language requirements follow the posting.

Technology in this role

• C: Senior Officer, Information Security 3 Job Details | Techcombank Senior Officer, Information Security 3 Information Technology Division Tham gia thực hiện các hoạt động quản trị ANTT theo phân công của Giám đốc Quản trị ANTT .
• R: - Thẩm định, đánh giá, rà .

Role-specific candidate guide

Preparation notes based on the employer’s stated responsibilities and qualifications.

Understanding the scope. This Senior Officer, Information Security 3 position at Techcombank is best assessed through the work described in the employer’s posting, rather than the title alone. The available role overview says: “Senior Officer, Information Security 3 Job Details | Techcombank” Read that statement together with the responsibilities below to understand the likely balance between delivery, coordination and technical decision-making. The role belongs to the security area, but that label is only a guide to the work; the employer’s own requirements remain decisive. Before applying, check the original listing for reporting lines, product or team assignment, employment terms and any details that may have changed since this copy was checked. Where this page says a fact is not specified, treat it as an open question rather than an implied promise.

What the responsibilities signal. The posting specifically names “Develop and maintain permission matrices, access-control requirements and data-protection measures for bank systems.”; “Configure and optimize identity and privileged-access controls, network defenses, endpoint protections and data-security tools.”; “Review account and certificate provisioning or revocation, privileged access, exceptions and changes to security solutions.”. For each duty, identify a project where you performed comparable work and be ready to describe the context, your own contribution, constraints, decisions, and measurable result. Explain how you moved from the initial need to implementation, review, release or operational follow-through, where those stages apply. If the work involved other teams or users, distinguish your decisions from the group’s contribution. Avoid presenting a technology keyword as proof by itself: connect it to the problem you solved, the scale or complexity involved, and what changed after your work. The source may contain additional duties; review it directly before preparing your application.

How to read the requirements. The listed qualifications include “University degree in IT, electronics, telecommunications or a related subject.”; “Four to five years of in-depth security policy, rule-set or platform operation in finance, services or telecommunications.”; “Experience in at least one area such as PAM/IAM, firewalls/NAC/IPS/DDoS, endpoint controls or DLP/FAM.”. Mark each requirement as demonstrated, adjacent experience or a genuine gap, then use a concise example for the first two categories. A strong example explains what you personally owned, how you made trade-offs, how you validated the result and what you learned. If the posting specifies years of experience, language ability, certifications, location or eligibility, address those facts plainly in your CV or application rather than relying on the employer to infer them. Do not claim a qualification from exposure alone. For a requirement you do not meet, describe relevant transferable experience accurately.

About Techcombank

The vacancy is on Techcombank’s official careers site. No work arrangement or role-specific benefits are stated.

Related jobs

• Corporate Security Lead, DLP and EDR — Money Forward Vietnam
• Lead Security Engineer, Red Team and Threat Intelligence at Grab — Grab
• Security Solutions Engineer at OpenRouter — OpenRouter
• Security Engineer at Deepgram — Deepgram
• Senior Security Engineer, Offensive Security at Docker — Docker
• Staff Security Governance Engineer at GitLab — GitLab