IT Security Governance Expert

Yêu cầu công việc

- University degree, preferably in Information Security, Information Technology, or a related technical field. - Relevant certifications strongly preferred: ISO 27001 Lead Auditor, ITIL 4, Personal Data Protection Expert (VnDPO), or equivalent. - Minimum 5 years of experience in IT Governance, IT Risk & Compliance, or Information Security Management — preferably in banking, financial services, or consumer finance. - Proven hands-on experience in developing and maintaining Information Security policies aligned with SBV regulations and international standards. - Demonstrated experience conducting internal security & compliance audits, IT risk assessments, and supporting external/independent audits. - Practical knowledge of Access Control management (user reviews, role matrix, IAM, privileged access management). - Experience with third-party/vendor risk management and security compliance assessments. - Familiarity with industry frameworks and standards: ISMS (ISO 27001), ITSM (ITIL), PCI-DSS. - Experience in process design and documentation. - Working knowledge of project methodologies and tools; familiarity with change management processes (e.g., Change Advisory Board participation) is a plus. - Strong analytical and problem-solving skills; ability to translate complex regulatory requirements into practical controls. - Excellent communication, negotiation, and stakeholder management skills. - Strong written communication in both English and Vietnamese is essential (policy drafting, audit reporting). - Planning, organizing, and time management skills; ability to work independently and drive initiatives. - Adaptability and a continuous learning mindset.