Về công việc
Trách nhiệm chính
- Own internal audits for IT systems and tech product operations, designing processes and controls to ensure compliance, security, efficiency, and scalability.
- Plan and execute risk‑based audits covering ITGC, IAM/SoD, change & release, backup/DR, logging/monitoring, vulnerability & patch, vendor/third‑party risk, cloud (AWS/Azure/GCP), data platforms, SDLC/SSDLC, DevOps/CI/CD, APIs, privacy & data protection, infra configuration, environment segregation, mobile & SDK, and real‑time infra.
- Build and maintain risk register, control library, testing programs; track remediation to closure.
- Map as‑is processes, analyze cycle time/defects/bottlenecks, design to‑be processes, define controls, KPIs/SLAs, SOPs, playbooks, checklists; digitize workflows.
- Align to frameworks/standards: ISO 27001/27701, SOC 2, COBIT, ITIL, OWASP/SSDLC, data privacy laws, Cybersecurity Law.
- Build analytics on logs/tickets/deploys/access/cost; automate controls and alerts; maintain dashboards.
- Orchestrate with Product, Engineering, QA, SecOps, Data, Finance Ops, and Legal; run training, workshops, and change‑management communications.
Yêu cầu
- Bachelor’s degree in CS/IT/Information Systems or equivalent with solid technical grounding (web/app, APIs, databases, networks, cloud basics).
- 5+ years of experience in IT Audit, Process/Quality Assurance, or Tech Risk/Compliance in product/SaaS/fintech/high tech.
- Strong process modeling (BPMN), root‑cause analysis, and control design; working knowledge of SDLC/DevOps/CI/CD and ITIL (Incident/Problem/Change/Release).
- Data skills: basic SQL queries; comfort with logs/metrics; Excel/BI proficiency; scripting (Python) is a plus.
- Excellent communication and influencing; able to challenge both technical and operational stakeholders.
Yêu cầu ưu tiên
- Certifications: CISA/CIA/CRISC/ISO 27001 LA, ITIL, COBIT, CSSLP; Lean Six Sigma (Green/Black Belt); PMP or Agile (Scrum/Kanban).
- Experience with cloud audits (AWS/Azure/GCP), SOC 2/ISO 27001 readiness, and privacy programs.
- Hands‑on with workflow/GRC tools (Jira/Confluence/ServiceNow; OneTrust/Drata/Vanta, etc.).
Hình thức làm việc
- Hybrid work arrangement.
Thông tin khác
- Full‑time position located in Thành phố Hồ Chí Minh, Vietnam.
- Hybrid Internal Audit × Process Quality Assurance role in a product company.
Việc làm liên quan
C
Thỏa thuận
Hà Nội
12 - 13 triệu
Bình Dương
Thỏa thuận
TP. Hồ Chí Minh
0 - 1 triệu
TP. Hồ Chí Minh