Security Engineer

• To enable the business in changing IT systems and pursuing opportunities in a secure way
• Enforcement of security policies and designing solutions that protect business value from security risks, threats and vulnerabilities
• Outline the core principals, conceptual and logical security models and controls for designing a secure system solution
• Consult and help the business, project and technical practitioners avoid missing critical security concerns
• Influence senior management and project leaders to update solution requirements to reflect security needs
• Analyze non-normative flows through systems and proposed solutions to identify risks, threats and vulnerabilities
• Deliver conceptual and logical security design abstractions to form the Security Architecture for solutions
• Consider business drivers for security and outline controls related to key domains
• Manage significant architectural decisions with senior management, sponsors and projects
• Proactively manage risk and assurance requirements when developing designs
• Coach and mentor others in the application of security and risk management concepts

Security Architect – Group Security

Software Engineer

• Development of Amazon Connect Platform and surrounding technologies
• Expand Gen AI usage for conversational banking
• Improve and uplift our tech stack using industry standard practices
• Expand our automated testing suite

Senior Developer

• Ensure respective policy, standards, processes and controls meet regulator and compliance expectations
• Support meeting departmental budgets
• Ensure controls and timely completion of findings and treatment plans
• Ensure and drive security outcomes relating to software development and devops practices
• Ensure and optimize dynamic application security testing tools and API security solutions
• Ensure tools are configured correctly and operating efficiently to provide maximum protection
• Utilize a variety of testing methodologies and tools to uncover potential threats and risks while eliminating the false positives
• Enhance and update application dynamic testing methodologies, processes and standards documentation
• Document and evangelize secure API design patterns
• Build and promote code libraries for API security
• Automate continuous security testing of APIs
• Consult with development teams to educate and improve awareness of secure standards and practices
• Support and champion the development of secure and reusable code across development teams to eliminate gaps identified in dynamic and API security testing
• Develop or use tooling to identify security vulnerabilities within our web application footprint
• Produce clear and accurate reporting for stakeholders
• Work with Cyber Engineering & Platforms teams to expand coverage and integrate dynamic and API security testing
• Work with Detection & Response and other Cyber Security teams to ensure critical exposures are mitigated in a timely manner
• Extend support on remediation of dynamic application testing and API vulnerabilities discovered through scanning and security testing
• Help manage the organization's vulnerability intake and remediation process
• Support incident response efforts as required
• Stay abreast of current and emerging technologies, threats and vulnerabilities, and best practice protection methods
• Research and analyze application behaviors to improve security and stability
• Contribute to the evolution of the organization's application security functions and services
• Other activities as required by management

Associate, DAST & API Security Posture

Affiliate Manager

• Supporting Agribusiness Partners
• Collaborating with BNZ specialists
• Risk Management
• Analyzing customer financial accounts and credit proposals
• Delivering on SLA agreements

Associate Partner – Agribusiness

Risk

• Provide direct line 1 risk support to the Chief Operating Office of Technology & Enterprise Operations (T&EO) as well as the Group Executive of T&EO
• Support Head of Risk Enablement and Delivery, covering the management of day-to-day risks
• Reporting of matters to the COO risk forum and GETEO office
• Assisting in the ongoing uplift of enterprise risk and risk culture across T&EO
• Conduct compliance and operational risk reporting
• Perform risk and control reviews and regularly assess impacts
• Ensure issues are known and resolved in a timely manner
• Lead gap assessment and treatment plan execution
• Management of control environment through design, testing and management of controls
• Team leadership

Manager, Risk Enablement and Delivery

• Providing direct line 1 risk support to the Chief Operating Office of Technology & Enterprise Operations (T&EO)
• Support to Head of Risk Enablement and Delivery
• Covering the management of day-to-day risks
• Reporting of matters to the COO risk forum and GETEO office
• Assisting in the ongoing uplift of enterprise risk and risk culture across T&EO
• Ensuring that NAB’s risk management strategy, operational risk management and control frameworks are applied effectively
• Providing advice and guidance on risk, obligations, events and control items
• Conducting compliance and operational risk reporting
• Performing risk and control reviews and regularly assessing impacts
• Ensuring issues are known and resolved in a timely manner
• Lead gap assessment and treatment plan execution
• Performing management of control environment through design, testing and management of controls
• Team leadership

Consultant, Risk Enablement and Delivery

Data Engineer

• Define and gather data requirements for large-scale data engineering and analytics initiatives.
• Design, build, and optimize scalable ETL/ELT data pipelines for batch and real-time processing.
• Ensure data quality, validation, lineage, and observability across multiple data sources.
• Standardize metrics and support reporting, analytics, and performance insights.
• Collaborate with stakeholders to resolve data issues and continuously improve data solutions and best practices.
• Fulfil other tasks as assigned by your People Leader and/or authorized representative of NAB Vietnam from time to time.

Senior Data Engineer – Lead

Customer Support

• first point of contact for customers
• engage with customers in a warm friendly manner
• process customer transactional banking needs
• help educate customers on digital solutions
• assist with product and service enquiries

Customer Service Banker

• Consult and help the business, project and technical practitioners avoid missing critical security concerns
• Influence senior management and project leaders, in order to update the solution requirements to reflect the need for security
• Analyse the non-normative flows through systems, applications and proposed solutions to identify risks, security threats and vulnerabilities in order to identify required security control components and countermeasures
• Deliver the conceptual and logical security design abstractions to form the Security Architecture for solutions
• Consider the business drivers for security and outline controls related to domains such as Identity and Access, Data and Media Protection, Security Information and Event Management, Communications, Configurations, and Vulnerability Management
• Manage significant architectural decisions with senior management, sponsors and projects to ensure secure outcomes and appropriate governance practices are adhered to
• Proactively manage risk and assurance requirements when developing designs that change risk posture within agreed Risk Appetite and ensure compliance
• Coach and mentor others in the practical application of security and risk management concepts, principles and strategies, and relevant industry standards

Security Architect

• providing administrative support to Partners
• credit management and portfolio risk monitoring
• preparing proposals for lending requirements
• proactive portfolio management to maximize revenue