Security Architect

***Note: We highly appreciate your interest in this position of HCLTECH Vietnam. After reviewing all applications, only qualified candidates will be contacted for the next steps within 15 days from date of submission!

ABOUT HCLTECH VIETNAM COMPANY LIMITED

HCL Vietnam Company Limited belongs to HCLTech which is a global technology company, home to 220,000+ people across 60 countries, delivering industry-leading capabilities centered around digital, engineering and cloud, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending Mar 31, 2025, totaled $13.8 billion. Website: https://www.hcltech.com/

JOB TITLE: Security Architect (Group Security – Security Consulting)

JOB LOCATION: Hanoi/Ho Chi Minh City, Vietnam (Hybrid working mode)

JOB SUMMARY:

To enable the business in changing IT systems and pursuing opportunities in a secure way; through enforcement of security policies and by designing solutions that protect business value from security risks, threats and vulnerabilities. To outline the core principals, conceptual and logical security models and controls for designing a secure system solution that protects business value and ensures the solution is designed within the risk appetite. To consult and help the business, project and technical practitioners avoid missing critical security concerns. To influence senior management and project leaders, in order to update the solution requirements to reflect the need for security.

Your Job Responsibilities

• Determining if solutions are in line with Group Information Risk Policy
• Determining appropriate security controls to address risks
• Managing technical deviations/significant risks and provide recommendations for alternative solutions and/or compensating controls to reduce impacts.
• Providing security consultancy to enable the Business and Project teams to understand impacts from proposed system changes and solutions. Includes handing difficult conversations and influencing colleagues to manage the solution requirements and reflect the need for security.
• Analyzing the non-normative flows through systems, applications and proposed solutions to identify risks, security threats and vulnerabilities in order to identify required security control components and countermeasures.
• Contribute with Senior Security Architects towards significant architectural decisions with senior management, sponsors and projects to ensure secure outcomes and appropriate governance practices are adhered to, including notifications to Technology Architecture Forums.
• Leveraging and updating existing control reference patterns and developing new patterns to outline integration approaches, use-cases, re-use, and technical reference for Enterprise security capabilities.
• Proactively managing risk and assurance requirements when developing designs that change risk posture within agreed Risk Appetite and ensure compliance.

Your Experience & Qualifications

Experience

• 8+ years experience in the Technology industry
• 5+ years experience in information security. Domains / Roles of experience can include, but is not limited to:

+ Security Risk Management,

+ GRC,

+ Security Audit,

+ Security Analyst,

+ Security and/or Risk Consulting

Essential capabilities (core)

• Decision Quality, Strategic Mindset, Situational Adaptability, Self-awareness, Excellent English Communicator, Accountability

Other capabilities (technical)

• Proven experience with strong business engagement, influencing skills with the ability to navigate complex topics with fact-based analysis
• Understand the trade-offs involved in security change while simultaneously delivering technical capability & business benefit. Requires commercial acumen, business alignment and ability to negotiate

Qualification Requirements

• Degree in Computer Science / information systems or equivalent technical qualification
• Security Certifications would be beneficial, or a commitment to pursue a recognised security industry certification

BENEFITS

• Insurance plan based on full salary + 13th month salary
• 100% full salary from the 1st day of working and during WFH
• Medical Benefit (Bao Viet Insurance package) for Employee and Family
• Working in a fast paced, flexible, and multinational working environment. Chance to travel onsite (in 54 countries)
• Internal Training (Technical & Functional). Scope of English Training
• 18 paid leaves per year (including 12 annual leaves + 6 personal leaves)