Senior Officer, Data Security and Privacy (40000075)

Job Purpose

The job holder defines the data privacy and security, and for ensuring controlled access to data requiring different levels of protection.

Key Accountabilities (1)

Data Privacy và Security
- Define different levels of access to data and who has authorized access to data to ensure only the right people have access to the right data.
- Define processes and procedures to govern how data is collected, shared and used follow proper internal and external compliance requirements.
- Ensure Data processings are properly documented.
- Manage access to sensitive and regulated data, Secure data against unauthorized access.
- Monitor and detect suspicious behavior on sensitive data. Identify and track who is accessing data, highlight unusual activity and report on odd behavior that’s regulated and sensitive.
- Provide advice and guidance across the business/divisions in relation to data privacy and associated matters.
- Monitor Bank compliance with applicable Regulations (GDPR, GLBA, FFIEC, Vietnam cyber law etc.).

Success Profile - Qualification and Experiences

Qualifications
- Bachelor's and Master’s degree in Statistics, Mathematics, Quantitative Analysis, Computer Science, Software Engineering or Information Technology
Work Experience
- At least 5 years of relevant experience in data security in large scale organizations
- English proficiency requirements are pursuant to Techcombank's policy
- Fluency in major querying languages such as SQL
- Intermediate understanding of Big Data technologies
- Conceptual understanding of the inner workings of an RDBM
- Advanced command on security software for data protection and authentication
- General fluency in security and authentication mechanisms across IT
- Advanced understanding of major cryptographic concepts, both symmetric and asymmetric cryptographic schemes
- Strong understanding of Agile principles, practices and scrum methodology
- Experience working in (Agile) teams to lead successful digital transformation projects, involved in the end-to-end planning to implementation