Type
Full-time
Work mode
On-site
Level
Staff
Industry
IT - Software
Salary
Thương lượng
Location
Hồ Chí Minh, Hồ Chí Minh, Hồ Chí Minh
Overview
- Policy & Regulatory Compliance
- Develop, review, and update Information Security policies, regulations, and procedures in compliance with State Bank of Vietnam (SBV) requirements, Vietnamese laws (including Decree 13 on Personal Data Protection), and international standards (ISO 27001, PCI-DSS).
- Prepare and maintain regulatory documentation such as Personal Data Processing Impact Assessment (DPIA) dossiers, and liaise with responsible authorities on personal data protection matters.
- Advise and guide colleagues across the IT Division on issued policies, procedures, and standards, ensuring they are implemented correctly and consistently.
- Governance Frameworks & Assessments
- Execute IT governance frameworks and internal/international standards, monitoring closely to ensure effective implementation across IT functions.
- Conduct Information Security and IT compliance assessments against legal and regulatory requirements.
- Perform technology risk assessments based on the company's operational risk management framework; propose appropriate controls to mitigate identified risks.
- Audit and evaluate the effectiveness of personal data protection measures and security controls.
- Risk Monitoring & Reporting
- Collaborate with relevant stakeholders to periodically report Key Risk Indicators (KRIs) and IT risk posture to management.
- Act as focal point for monitoring and supervising the remediation of findings from internal audits, independent audits, and other inspections.
- Periodically report on high-risk IT incidents and compliance status.
- Awareness & Capability Building
- Develop and deliver Information Security awareness training materials and programs for all staff.
- Communicate governance activities and policy changes within the IT Division, ensuring teams understand how these affect IT services and deliverables.
- Continuous Improvement
- Analyze and improve existing IT policies, procedures, and practices; recommend changes to align with evolving standards and best practices.
- Stay updated on new regulations and industry best practices to recommend proactive improvements.
- Work closely with cross-functional IT departments to develop and coordinate a compliance schedule tailored to applicable regulations and standards.
Benefits
Training
Summary of facts from the official posting. View original ↗
Interested in this role?
You'll be taken to the employer's official application page.
Apply on official site ↗
Is this your business?
Claim this page, request edits or removal
→