[Production Office] Information Security Specialist (ISO)
UNIQLO · Vietnam
In the world changing at an accelerating pace due to Globalization and Digitalization, Fast Retailing has transformed into a "Digital Consumer Retail Company" that transcends the traditional framework of retailing. We aim to enrich lives everywhere by providing "LifeWear" to customers around the world. With this context, the Information Security Office is charged with the mission of protecting the important information of our customers and all confidential information within our company, to ensure a secure business environment for business growth.
In order to accomplish this mission, we are looking for a key participant in the information security program for Vietnam supply chain, including production offices, factories, logistics providers and transportation partners. This person will take responsibility for governance, compliance, risk assessment, remediation tracking, incident management, security awareness and maturity improvement across Vietnam supply chain partners, and may participate in other global and regional ISO support as needed.
1. Key Responsibilities
- Maintain an information management and protection framework for an effective global supply chain-wide governance program.
- Identify, track, and oversee internal and external compliance and regulatory requirements (Cyber Security Laws, Privacy Laws, etc.) for the global supply chain including compliance with established policies, procedures, standards, baselines, and controls.
- Act as the primary Vietnam Information Security representative for production offices, factories, logistics providers and supply chain partners. Drive security governance, risk remediation, incident management and security maturity improvement across Vietnam supply chain partners.
- Manage day-to-day security activities, including vendor security onsite audits, remote assessments and ad-hoc investigations, and follow up with global production teams and partner factories to remediate findings.
- Track and manage remediation of audit findings. Engage factory management, FIC teams and production stakeholders to ensure timely closure of security risks and escalation of overdue findings.
- Coordinate local security incident reporting, investigation support, root cause analysis and corrective action management with factories and regional/global ISO teams.
- Build strong relationships with Production, Factory Inspection Center, factory management and local business stakeholders to promote security awareness and implementation of security requirements.
- Develop and deliver security awareness programs, incident response workshops, Minimum Security Requirement trainings and factory education programs to promote a culture of security and best practices within production-related organizations.
- Coordinate deployment and adoption of global security initiatives, such as Enterprise Browser / Island Browser, account governance controls and security monitoring initiatives, across Vietnam factories.
- Assist other ISO members to respond to security incidents in the Vietnam supply chain, including personal/confidential information leakage, system compromise, employee information leakage, information breach, factory physical security and production-related security concerns.
2. Salary & Benefit:
- Negotiable for Gross salary.
- Performance Bonus (twice per year), 13th-month bonus.
- 24/24 Premium Insurance (In Vietnam) & Business travel insurance.
- Health, social & unemployment insurance (following Government regulation).
- Company phone & laptop.
- Annual health check, private healthcare plan.
- Transportation & parking allowance.
3. Requirement
- Educational Background: Bachelor or Master degree in IT, Security, Audit, Computer Science or other related majors.
- Business English equivalent to TOEIC 700.
- At least 5+ years of experience in information security governance, risk management, audit, compliance or third-party security role, with focused experience in risk assessment, remediation management, compliance and training.
- Knowledge and Experience in information security governance frameworks such as ISO27001 (or any other recognized security governance frameworks)
- Knowledge and Experience in information security incident response.
- Experience in developing and enforcing security policies and procedures.
- Knowledge in Operation Technologies systems and their security implications.
- Experience performing security assessments, risk reviews, compliance assessments, audits or supplier/vendor governance activities.
- Excellent communication skills to convey complex security concepts to technical and non-technical stakeholders.
- A proactive and adaptable mindset, with a willingness to stay updated on emerging threats and technologies.
- Preferred other technical and/or security certifications are preferred. (e.g. CISA, CISM, CISSP, etc.).
- Preferred experience in risk management, vendor security assessment, third-party risk
4. Office Location
Sunwah Tower, 115 Nguyen Hue, Sai Gon Ward, Ho Chi Minh City
5. Working hour
8:00-17:00 Monday-Friday
#Job #JobOpportunity #Hiring #Recruitment #UNIQLO #FastRetailing #ISO #Textile #Apparel #InformationSecurity #CyberSecurity