Open to opportunities

Minh Tiến Hoàng

@minhtinhong

Message

Enterprise Security Director shaping risk-driven, multi-domain security programs.

Vietnam

Message

What I'm looking for

I’m looking to lead enterprise security architecture and governance that’s risk-driven, compliance-ready (ISO 27001/SOC 2/NIST), and aligned with business growth and digital transformation—while building and scaling high-performing security teams.

I’m an Enterprise Security Director and cybersecurity & technology leader with 12+ years’ experience designing enterprise security architectures, building security programs, and delivering multi-year, risk-driven strategies across global enterprises, banking, and critical infrastructure. I architect multi-domain security frameworks across IAM, DLP, Endpoint, Email, Network, Cloud, SOC, Vulnerability Management, Attack Surface Management, and AI Security—turning complex security requirements into business-aligned roadmaps.

I’m recognized for building high-performing security teams, establishing security governance frameworks, and managing regulatory compliance (ISO 27001, SOC 2, NIST and more). Most recently, I lead enterprise-wide security strategy and architecture governance across on-premises, multi-cloud (AWS, Azure, Alibaba Cloud, Google Cloud), and SaaS environments, including ISO/SOC/NIST GRC execution, audit readiness, and remediation tracking. I also serve as a trusted advisor to C-suite on enterprise security risk, compliance strategy, and digital transformation alignment, while driving security culture transformation and mentoring architects and engineers in enterprise design methodologies.

Experience

Work history, roles, and key accomplishments

Current

Enterprise Security Director

Current

Opswat Enterprise

Jan 2025 - Present (1 year 3 months)

Led enterprise-wide security strategy, architecture, and risk management across on-premises, multi-cloud, and SaaS environments. Established multi-domain security governance (IAM, DLP, Endpoint, Email, Network, Cloud, Vulnerability Management, Attack Surface Management, SOC) and maintained ISO 27001/SOC 2/NIST-aligned compliance while rebuilding and scaling the security team.

Security Architecture Security Governance Risk Management IAM DLP Vulnerability Management

Technology Governance Senior Manager

Standard Chartered Bank Vietnam

May 2024 - Dec 2024 (7 months)

Owned technology and security risk management aligned to organizational risk frameworks and local regulations, overseeing service stability, compliance, obsolescence, vulnerability, and third-party risks. Served as SME/RFO for regulatory obligations (including obligation register, gap analysis, control proposals) and provided senior risk escalation, incident/regulatory reporting support, and secur

Technology Risk Management Security Governance Regulatory Compliance GRC Security Awareness

Head of Cybersecurity & Support

GreenFeed Vietnam

Feb 2023 - Apr 2024 (1 year 2 months)

Managed three integrated departments (Cybersecurity, Infrastructure, IT Support) with 25+ team members supporting 4,000+ users across 50+ locations. Architected and implemented enterprise security programs (IAM SSO/PAM, DLP, endpoint, network segmentation, infrastructure modernization) and led transformation initiatives including IAM, DLP, SD-WAN, EDR, ZTNA, CASB, M365, ERP/SAP basis modernization

Security Program Management DLP Segmentation SD WAN ZTNA

Cyber Security Manager

Heineken Vietnam

Aug 2020 - Feb 2023 (2 years 6 months)

Implemented global information security frameworks locally while meeting regulatory requirements. Built a vulnerability management program across 100+ assets using automated scanning, risk scoring, and lifecycle management, and coordinated incident response and third-party supplier security assessments with managed vendor security requirements.

Information Security Governance Vulnerability Management Risk Scoring Incident Response Security Assessments Security Frameworks

Country Information Security Officer

BNP Paribas Vietnam

Oct 2019 - Aug 2020 (10 months)

Led country information security responsibilities with regional support for IT controls, risk management, evidence validation, and third-party security reviews. Approved application security baselines, managed IT security governance, delivered security training, and ensured compliance with local regulations and SBV requirements, including data security assessments and security recommendations.

Information Security Governance Risk Management Security Reviews Security Baselines Security Assessments Security Training