Cyber Security Manager

Company Description
**KayPay** is the latest business built and launched by KMS. With the current team of 1,500+ engineers, KMS has successfully built and been operating global product companies. These global product companies are serving users from 160+ countries, 1,500+ enterprise customers. The total investment value from investors has exceeded $80M resulting in a total market cap of more than $1B.

**KayPay** is the leading BNPL business that empowers the trendy quality lifestyle for young consumers, by providing a personalized and joyful shopping experience while promoting responsible spending habits

**Job Description**:

- Develops strategic and tactical plans for cybersecurity risk management and coordinates the execution of the approved plans.
- Identifies key cybersecurity initiatives and programs through a risk-based approach.
- Communicates new key cybersecurity initiatives and risks to top management and stakeholders.
- Monitors and reports the performance of the cybersecurity program to senior management.
- Advises management on the impact of the organization's key cybersecurity risks.
- Recommends mitigation controls for the organization's key cybersecurity risks.
- Investigates suspicious activities within IT systems and networks, identifies the infected hosts, and prevents them from affecting the rest of the network. Correlates and validates alerts to ensure they represent relevant security incidents.
- Detects vulnerabilities from vulnerability scan and the external resource, analyzes, assesses the risk, prioritizes and coordinates with related parties for remediation, report & continued monitoring.
- Joins the team to conduct the penetration testing projects on Company’s infra and systems in production and development environments.
- Selects and deploys practices from industrial standards such as ISO 27001 family, SOC 2, NIST’s cybersecurity framework, or PCI-DSS into our operations.

**Qualifications**:

- Experience with developing cybersecurity risk management plan & business continuity plans.
- Have 2 - 3 years of experience in cybersecurity, especially in SOC analysis or security operation.
- Experience in using Vulnerability Scanning Tool (Nessus, OpenVAS, or any other platforms) and ability to analyze scanning reports.
- Ability to script and automate repetitious tasks (using Python, Powershell as a plus).
- Familiar with cybersecurity threat hunting such as OSINT, Shodan, Censys, Spiderfoot, etc. is a plus.
- Familiar with cybersecurity technologies and tools such as Next-gen firewall, N-IDS/H-IDS, Cloud infrastructure, SIEM, Kali Linux tools set, IoT, etc. is a plus.
- Knowledge of Penetrating Testing, Red Teaming, and Threat Hunting will be an advantage.
- Having knowledge of ISO 27001, SOC2, GDPR, CSA (Cloud), HIPAA, NIST’s cybersecurity framework, and PCI-DSS is an advantage.
- Demonstrate strong organizational skills, including time management and the ability to prioritize and manage a range of tasks pro-actively.
- Demonstrate good logical thinking and problem-solving skills.
- Ability to effectively prioritize, take ownership, and execute tasks in a high-pressure environment.
- Highly motivated, self-directed.

Education/Training Preferred:

- Bachelor’s degree in Computer Science related field or equivalent work experience.
- Security certificate: Security+, CEH, CHFI, ECIH other equivalent or higher certificates are an advantage.
- IT certificate: MCSE, LPI, CCNA, and CCNP is also a plus.

Additional Information
**Perks you Enjoy**
- Competitive salary and benefits
- Work with a highly talented team in one of the best places to work in Vietnam
- Modern office in HCMC; premium healthcare insurance for you and your family; annual company trip and year-end party; many fitness/sports programs and team building events; in-house entertainment facilities, snacks and beverages.

And much more, join us to build high-impact global products from Vietnam