Chuyên viên CNTT - Mảng An toàn thông tin ( Information Security Engineer)

1. Operate and continuously improve the Company’s Information Security Management System (ISMS) in accordance with ISO 27001:2022.

2. Implement, monitor, and evaluate the effectiveness of IT security controls; perform testing, risk assessments, and periodic security reviews.

3. Detect, respond to, and handle information security incidents, ensuring risks are minimized and systems are restored in a timely manner.

4. Contribute to the development, updating, and internal training of information security policies and procedures.

5. Perform other tasks as assigned by the Head of Department and IT team's leader.

1. Bachelor’s degree in Information Technology, Information Security, Cybersecurity, or related fields.

2. Candidates must have requirements of 1–3 years of experience in information security or in comparable IT security roles.

3. Possession of at least one of the following security certifications is an advantage: Security+, CISSP, CEH; or IT certifications such as MCSE, LPI, CCNA, CCNP.

4. Knowledge and experience in operating security systems/devices/solutions such as Cisco, Palo Alto, Fortinet, WAF, SIEM, Sophos, PAM, DLP, etc.

5. Understanding of laws and regulations related to the oil and gas services industry is an advantage.

6. Experience in implementing and managing IT infrastructure and projects related to information security.

7. Experience and knowledge in operating antivirus systems, firewalls, vulnerability and threat scanning tools, patch management, PAM, SIEM, etc.

8. Skills in security event and incident management, vulnerability management, and penetration testing.

9. English proficiency sufficient to meet job requirements.