Security Architect

We are building a close knit and lean team bringing in modern approaches to security, integrating cloud-native security designs, offensive security, and agile development. Working closely with security engineering and automation, the Security Architect will also work tightly with internal stakeholders (developers, architects, business) to design adaptive controls and ensure a sound security posture and risk reduction. **The Role Responsibility**: Not exhaustively, the **Security Architect **will be responsible for: - Developing and documenting security architecture designs, patterns and blueprints - Reviewing current system security measures and recommending and implementing enhancements - Reviewing the effectiveness of security controls and adherence to regulatory and compliance requirements - Developing project timelines for ongoing system upgrades - Working closely with Product squads, Application Security and End-user Computing to ensure architecture artefacts are established and maintained, deriving adequate control plans adapted to each business context - Working closely with the group to ensure our Digital Venture meets and exceeds control objective requirements across cyber defence, investigations, incident response and forensics **Yêu Cầu Công Việc**: - Is a technical expert in security architecture, engineering and related areas of expertise - Is a master of the relevant tools and engines - Has the hands-on expertise to build and support the operational objectives - Has experience in IT/security risk management - Is self-driven, forward-looking and proactive in meeting the requirements but also proposing better solutions - Understands and can articulate the risk of missing controls and need for operational visibility - Ideally, has experience working in supporting regulated digital payment services such as payment industry & digital banking, or e-commerce services - Has a good understanding of DevOps and CI/CD pipelines in a context of security and compliance guardrails - Has a solid understanding of security protocols, cryptography, authentication, authorisation and auditing - Has good working knowledge of current IT risks and experience implementing security solutions - Is experienced in implementing multi-factor authentication, single sign-on, identity management or related technologies - Has excellent written and verbal communication skills as well as business acumen and a commercial outlook **Tại Sao Bạn Sẽ Yêu Thích Làm Việc Tại Đây**: **HR benefits** - Competitive salary - Salary band per level and employee benefits are reviewed once per year - 13th month salary pro rata depending on the employee’s length of service (within a calender year), paid with the December salary - Monthly lunch allowance: 700,000 VND/employee - Parking: GFT covers the monthly parking fee for employee motorbikes - Performance evaluation is once per year, for 2 purposes: > Performance bonus > Salary increments **Talent retention policy** (Retention bonus) - 2-year anniversary = 0.5x monthly salary - 3-year anniversary = 1x monthly salary - 5-year anniversary = 2x monthly salary - Paid with salary of month of anniversary. **Health care** - Private health insurance: including accident, outpatient, in-patient, maternity, and dental for all permanent employees who pass 2-month probation. - Optical: expense claim for eyewear - Annual health check-ups. **Vacation** - Maximum 18-day vacation leave/year (with the ability to carry over 05 days till 31st March of the following year) - Adding one more annual leave day for each two-year anniversary. **Healthy lifestyle** - Sports and hobby clubs: company has an annual fund for fitness activities, which is allocated per month as team’s vote. - Range of healthy snacks, tea, coffee, milk and beer on tap: > Tea, coffee and milk are available at pantry area - WeWork > Beer is available at pantry area - WeWork > Snack is available in GFT office. **Social** - Company townhall: each 6 weeks - Monthly team lunch at restaurants - Monthly team engagement activities: one activity per month - CSR activities: as per company’s CSR guideline and practice - Hackathon: once per year - Onsite tour/training courses at other GFT offices and client’s destination overseas (where applicable).