Expert, Data Security and Privacy

24 Feb 2025

**Expert, Data Security and Privacy (40000074)**:

- Category: Data And Analytics Division
- Job Type:

- Facility: Data & Analytics

**Job Purpose**:

- The job holder participates in definition of the security architecture, ensure that it meets the business requirements and performance goals.
- The job holder identifies vulnerabilities and work with the research, engineering and technical client success departments to resolve them and ensure that our network and data remain secure.

**Key Accountabilities (1)**:

- Data Privacy và Security
- Contribute his/her expertise with team to define different levels of access to data and who has authorized access to data to ensure only the right people have access to the right data.
- Establish, monitor and enforce processes and procedures to govern how data is collected, shared and used follow proper internal and external compliance requirements.
- Ensure Data processings are properly documented.
- Manage access to sensitive and regulated data and secure data against unauthorized access
- Monitor and detect suspicious behavior on sensitive data.
- Actively enhance processes, systems to identify and track who is accessing data, highlight unusual activity and report on odd behavior that’s regulated and sensitive.
- Guide team to provide expert advice and guidance across the business/divisions in relation to data privacy and associated matters.
- Audit, control and monitor Bank compliance with applicable Regulations (GDPR, GLBA, FFIEC, Vietnam cyber law etc.).

**Key Accountabilities (2)**:

- Projects Management
- Manage project conflicts, challenges and dynamic business requirements to keep operations running at high performance.
- Work with team leads to resolve people problems and project roadblocks, conduct post mortem and root cause analyses to improve practices for maximum productivity.

**Key Accountabilities (3)**:

- Talent Development
- Coach junior members in team to enhance their data privacy và security capability.
- Identify and encourage areas for growth and improvement within the team and support with personal development plan.

**Key Relationships - Direct Manager**:
Senior Manager, Data Security and Privacy

**Key Relationships - Direct Reports**:
**Key Relationships - Internal Stakeholders**:
Business Unit, Enabling Unit (IT or Data - Engineer/Governance), division heads (Business, Finance, Risk, Corporate Affairs, IT), CEO, CIO, CDO, Chairman

**Key Relationships - External Stakeholders**:
Partners and vendors providing professional services

**Success Profile - Qualification and Experiences**:

- Qualifications
- Bachelor's and Master’s degree in Statistics, Mathematics, Quantitative Analysis, Computer Science, Software Engineering or Information Technology

Work Experience
- 7+ years of relevant experience in data security in large scale organizations
- English proficiency requirements are pursuant to Techcombank's policy
- Fluency in major querying languages such as SQ
- Intermediate understanding of Big Data technologies
- Conceptual understanding of the inner workings of an RDBM
- Advanced command on security software for data protection and authentication
- General fluency in security and authentication mechanisms across IT
- Advanced understanding of major cryptographic concepts, both symmetric and asymmetric cryptographic schemes
- Strong understanding of Agile principles, practices and scrum methodology
- Experience working in (Agile) teams to lead successful digital transformation projects, involved in the end-to-end planning to implementation