Area: Cybersecurity
Job Description
-
Develop the Group Data Security Framework and oversee its implementation.
-
Lead data classification and lifecycle management processes.
-
Deploy and operate Data Loss Prevention (DLP) solutions.
-
Safeguard personal data and privacy compliance with local and international standards.
-
Enforce data protection measures across database, application, and cloud layers (encryption, authentication, access control).
-
Review, assess, and report on data protection activities.
-
Provide consulting and advisory support on data security and privacy protection for business units.
-
Handle data breach incidents, conduct root cause analysis, and implement corrective actions.
-
Conduct data risk assessments and maintain the corporate data risk register.
-
Perform regular data security compliance audits.
Requirements
-
Experience in data protection and privacy management (DLP, encryption, access control).
-
Strong understanding of data security standards and regulations: GDPR, NIST, ISO 27001, Decree 13/2023/NĐ-CP.
-
Proven ability to conduct risk assessments and develop enterprise data security policies.
-
Experience in incident response, forensics, and data breach remediation.
-
Preferred certifications: CIPT, CISM, ISO 27701, or equivalent.
-
Strong stakeholder management, systems thinking, and communication skills with senior leadership.
HOW TO APPLY: Please send your CV to the consultant in charge:
Ms. Quynh Uyen
Email: uyen.nguyen@ev-search.com
All applications will be considered without regard to race, color, religion, sex (inclusing pregnancy and fender identity), national origion, political affiliation, sexual orientation, mariatal status, disability, genetic information, age, membership in an employee organization, parental status, military service or other nonmerit factor