Summary
Overview
Work History
Education
Skills
Websites
Certification
Timeline
Generic

Jimmy Duy Tien

Cybersecurity, Risk & Control
HCMC

Summary

Experienced risk and cybersecurity professional with a progressive career spanning IT infrastructure, data protection, security consulting, and risk management. Skilled in bridging technical expertise with business risk strategy, currently operating as a First Line of Defense risk practitioner supporting stakeholders in integrating risk and compliance into decision-making. Demonstrated success in delivering cybersecurity assessments, data loss prevention programs, and control uplift initiatives across fast-changing technology environments. Recognized for the ability to translate complex technical risks into actionable insights, enhance organizational resilience, and position risk teams as trusted business partners.

Overview

6
6
years of professional experience
6
6
Certifications

Work History

Senior Associate - Risk & Control

NAB Vietnam
Ho Chi Minh City, Ho Chi Minh
06.2023 - Current
  • Partner with senior stakeholders to deliver risk insights, ensuring that business decisions integrate risk and compliance requirements.
  • Conduct risk and control assessments in complex technology environments (20+ risk and control assessments annually across cloud and on-premise environments), identifying exposures, non-compliance, and opportunities to strengthen processes.
  • Design and implement risk controls (10+ new risk controls about Test Data Management, Technology Change Management, UAR etc.) to address operational and technology risks, defining preventive, detective, and corrective measures.
  • Lead risk event management by investigating incidents, analyzing root causes, and overseeing remediation plans.
  • Support business units in regulatory and internal audit readiness, closing gaps within required timeframes.
  • Deliver risk awareness and training programs, positioning the risk team as trusted advisors across the business. Delivered risk awareness training to 200+ staff across business units, improving policy adherence and reducing minor compliance breaches.
  • Collaborated with cross-functional teams to drive successful completion of complex projects within deadlines.

Data Protection Analyst

NAB Innovation Centre Vietnam
06.2022 - 05.2023
  • Triaged and investigated data leakage incidents (50+ data leakage incidents monthly), preventing sensitive information from reaching unauthorized entities, or external parties.
  • Escalated policy-breach cases through the event management system, providing guidance to business units on secure data handling, and information sharing.
  • Developed recurring DLP reports and dashboards (fortnightly, quarterly) using Splunk and other monitoring tools, enabling senior leaders to track data protection posture and program effectiveness.
  • Applied data management, analytics, and mining techniques to identify trends and emerging risks, strengthening proactive data protection measures.
  • Recommended and implemented improvements to DLP monitoring processes, operating procedures, and policies to enhance efficiency and reduce false positives. Look for areas for improvement in our operating and monitoring processes, practices, or policies.
  • Authored 10+ standard operating procedures (SOPs), improving internal knowledge sharing and reducing onboarding time for new analysts by 40%

Cyber Security Consultant

QS solutions
08.2020 - 06.2022
  • Delivered end-to-end cybersecurity assessment projects, including gap analysis, control testing, and reporting, ensuring successful client engagements.
  • Analyzed client technology environments and developed tailored information security solutions to prevent cyber incidents and strengthen system resilience.
  • Conducted gap analyses on technology and data security practices, aligning recommendations with international standards (CIS, NIST).
  • Authored technical reports outlining security findings and actionable remediation steps, presenting results, and strategic recommendations to senior management and clients.
  • Identified opportunities to improve client technology processes and procedures, enhancing security posture, and operational efficiency.
  • Provided technical support and cybersecurity training to global partners, enabling effective deployment and adoption of security solutions.
  • Researched emerging security technologies, and contributed expertise to strengthen the consultancy’s service offerings.
  • Increased employee awareness of cybersecurity best practices by developing and delivering training programs.

IT executive

Uniexport
06.2019 - 08.2020
  • Planned and deployed IT infrastructure solutions (routers, firewalls, switches, servers, PCs, and access points) to meet diverse project and business requirements.
  • Researched, tested, and integrated new IT solutions (Sophos, Palo Alto, Ruckus, Cisco, Snipe IT, ServiceDesk, JumpCloud) to enhance system compatibility and business efficiency.
  • Implemented enterprise Wi-Fi solutions (Cambium) with VLAN integration and hotspot user management, improving connectivity and user access control.
  • Administered core infrastructure services, including Active Directory, File Server, Group Policy, DNS, DHCP, Remote Desktop, and 3CX telephony system.
  • Delivered end-user support, troubleshooting hardware/software issues, and ensuring minimal downtime across business operations.

Education

Bachelor of Engineering - BE - Electrical, Electronics and Communications Engineering

VNUHCM - University of Science
Ho Chi Minh City, SG
09.2019

Skills

Software Development Life Cycle (SDLC)

Information Technology

Cybersecurity

Problem-solving abilities

Adaptability and flexibility

Cross-functional teamwork

Work Planning and Prioritization

Enterprise risk management

Certification

Azure Security Engineer Associate

Timeline

Certified in Risk and Information Systems Control Specialization

09-2024
AWS cloud practitioner
06-2024
CompTIA Security+
11-2023

Senior Associate - Risk & Control

NAB Vietnam
06.2023 - Current
Azure Security Engineer Associate
04-2023
Microsoft Certified: Azure Fundamentals
09-2022

Data Protection Analyst

NAB Innovation Centre Vietnam
06.2022 - 05.2023

Cyber Security Consultant

QS solutions
08.2020 - 06.2022

IT executive

Uniexport
06.2019 - 08.2020
Cisco Certified Network Associate Routing and Switching (CCNA)
03-2019

Bachelor of Engineering - BE - Electrical, Electronics and Communications Engineering

VNUHCM - University of Science

Similar Profiles

CREATE PROFILE
Jimmy Duy TienCybersecurity, Risk & Control