Trách nhiệm chính

Assist in driving a robust Governance, Risk, and Compliance framework across Timo and Kredivo Group.
Monitor and maintain compliance with Vietnamese Banking and Personal Data Protection regulations.
Lead and coordinate internal and external audits, including regulatory inspections.
Conduct policy compliance monitoring, internal control reviews, and governance structural updates.
Prepare evidence and drive annual assessments to maintain PCI DSS Level 1 Standard certification.
Lead the comprehensive User Access Review (UAR) program across internal and external core systems.
Conduct risk assessments and mitigation plans for vendors and third-party partners.
Plan and drive security awareness training across business and technical units.

Yêu cầu công việc

3+ years of hands-on experience in IT Security Governance, Risk, and Compliance (GRC).
Proven track record in implementing or leading assessments for international governance frameworks like PCI-DSS and ISO-27001.
Experience working in highly regulated, production-scale environments such as Fintech, Banking, or Digital Services.
Ability to collaborate with cross-functional stakeholders, software engineers, and third-party entities.
Deep knowledge of GRC frameworks, audit methodologies, and security controls (IAM, network security, enterprise security tools).
Strong capabilities in vendor risk assessment.
Professional proficiency in English.

Yêu cầu ưu tiên

Professional security or auditing certifications such as CRISC, CISA, CISM, CISSP, or CGRC.
Prior experience navigating State Bank of Vietnam (SBV) and MPS regulatory requirements.
Experience in Cloud Environments and automated GRC workflows.

Mức lương

Phúc lợi

Hình thức làm việc

Thông tin khác

Report directly to the Infosec Lead.
The role involves working as part of the Kredivo Group's regional security team.

Senior IT Governance (ISO 27001, PCI DSS)