IT Compliance Specialist
About This Job
Trách nhiệm chính
- Develop, implement, and maintain IT compliance programs, policies, standards, and procedures.
- Ensure compliance with regulations such as ISO 27001, SOC 2, GDPR, PCI-DSS, HIPAA, SOX, and local requirements.
- Monitor changes in regulatory requirements and assess their organizational impact.
- Coordinate internal and external IT audits, prepare documentation, and track remediation of identified gaps.
- Conduct compliance assessments and control reviews.
- Identify, evaluate, and mitigate IT compliance risks across systems and applications.
- Develop and maintain IT policies and governance frameworks, reviewing control effectiveness.
- Collaborate with IT and business teams to ensure proper control implementation.
- Conduct compliance awareness training and promote information security best practices.
- Maintain compliance records, risk registers, and generate status reports and KPIs for management.
- Work with Information Security, IT Operations, Legal, Risk Management, and Business Units on compliance initiatives and vendor assessments.
Yêu cầu công việc
- Bachelor's degree in Information Technology, Information Security, Computer Science, Business Administration, or a related field.
- At least 3 years of experience in IT compliance, information security, IT audit, governance, or risk management.
- Practical experience with regulatory frameworks and compliance standards.
- Strong knowledge of ISO 27001, NIST Cybersecurity Framework, COBIT, SOC 2, PCI-DSS, GDPR, and IT General Controls (ITGC).
- Strong analytical, problem-solving, documentation, and report-writing abilities.
- Knowledge of risk assessment methodologies.
- Strong communication and stakeholder management skills.
- Ability to manage multiple projects and meet deadlines.
Yêu cầu ưu tiên
- CISA (Certified Information Systems Auditor).
- CISM (Certified Information Security Manager).
- CRISC (Certified in Risk and Information Systems Control).
- CISSP (Certified Information Systems Security Professional).
- ISO 27001 Lead Implementer or Lead Auditor.
- Certified Compliance & Ethics Professional (CCEP).
Mức lương
- Lương: Thương lượng.
Hình thức làm việc
- Địa điểm làm việc: Hội sở (Tp. HCM).
Thông tin khác
- Hạn nộp hồ sơ: 2026-10-31.