Trách nhiệm chính

• Develop, document, and maintain operating procedures and testing guidelines for IT controls and compliance activities, covering SDLC, Change Management, user access reviews, user provisioning and deprovisioning, and privileged access management.
• Perform risk‑based SDLC compliance reviews for critical applications, ensuring that User Stories, release notes, SIT/UAT results, approvals, testing evidence, and deployment records comply with established standards.
• Conduct monthly SOX‑related user access reviews by examining system logs, access request tickets, approval records, and user authorization to identify and investigate unsupported access.
• Monitor user access revocation for terminated employees, coordinate with Line Managers on pending requests, and verify that access is removed within the required three‑day timeline.
• Support SDLC standardization initiatives by conducting gap assessments, enhancing procedures and templates, and developing compliance checklists and monitoring guidelines.
• Maintain QA trackers, testing results, control evidence, exception logs, root‑cause analyses, and remediation plans, ensuring identified issues are tracked through to closure.
• Prepare periodic quality assurance and compliance reports, identify recurring control weaknesses, and elevate overdue or high‑risk exceptions to management.
• Collaborate with Technology Delivery teams, application owners, IAM, Information Security, Risk, Compliance, and auditors to collect evidence, validate control effectiveness, and drive corrective actions.

Yêu cầu

• Bachelor’s degree in Information Technology, Information Systems, IT Risk Management, Auditing, or a related discipline.
• At least 4–5 years of relevant experience in Quality Assurance, IT controls, IT audit, technology risk, SOX/ITGC, or Compliance Testing.
• Working knowledge of SDLC, Change Management, Identity and Access Management (IAM), user provisioning and deprovisioning, User Access Reviews (UAR), privileged access management, and vendor access controls.
• Experience reviewing system logs, access request tickets, approval records, testing evidence, and deployment documentation to assess control compliance and identify exceptions.
• Strong analytical skills, attention to detail, professional skepticism, and the ability to investigate root causes, maintain audit‑ready documentation, and follow up on remediation actions.
• Good stakeholder management and written communication skills in English; Vietnamese communication skills are preferred.
• Proficiency in Microsoft Excel and collaboration or workflow tools. Experience with Jira, IAM platforms, CyberArk, or Governance, Risk, and Compliance (GRC) tools is an advantage.

Yêu cầu ưu tiên

• Familiarity with frameworks such as COBIT, ITIL, ISO 27001, or NIST.
• Relevant certifications such as CISA, CRISC, or CIA.
• Experience with Jira, IAM platforms, CyberArk, or GRC tools.

Mức lương

• Thỏa thuận

Phúc lợi

• Competitive salary and 13th‑month salary
• 14+ annual leaves per year
• Premium healthcare insurance, starting from your probation period
• Project reviews and yearly performance appraisals
• Annual company trips
• Teambuilding activities: Team lunch/dinner, events, and celebrations, sports clubs (football, yoga, badminton, etc.)
• International team with flexible working time
• Tailor‑made career path
• Technical workshops and training courses
• Mobility: Opportunities to be on‑site abroad in our offices in over 60+ countries