IT Security Governance Expert

ACG_3763_JOB Our client, a leading company in financial services sector in Vietnam, is looking for a qualified candidate to join their firm. Job Purpose Responsible for assessing the effectiveness of information security controls, developing and implementing appropriate security measures, and minimizing cybersecurity and information security risks. The role also supports the development and oversight of Identity & Access Management (IAM) initiatives while ensuring security controls remain compliant and effective. Key Responsibilities Coordinate with Risk Management teams to implement the information security risk management framework, assess cybersecurity risks, manage third-party risks, and monitor remediation of security vulnerabilities. Develop, maintain, and implement information security policies, standards, and procedures in compliance with relevant regulations and international standards such as ISO 27001 and PCI-DSS. Plan and oversee the implementation of Identity & Access Management (IAM) programs across the organization. Develop and deliver information security awareness and training programs for employees. Review and approve IT service requests related to information security. Develop dashboards and security performance indicators, including KRI, SLA, RPO, and RTO, and prepare required regulatory or management reports. Support and guide security enhancement projects aimed at strengthening the organization’s cybersecurity capabilities. Requirements Bachelor’s degree or higher in Information Technology, Information Security, Cryptography, Computer Science, System Administration, or a related field. At least 5 years of experience in Information Security within the Banking or Financial Services sector. Strong knowledge of international security standards such as ISO 27001 and PCI-DSS, as well as relevant regulatory requirements. At least 5 years of hands-on experience in one or more of the following areas: Identity & Access Management, Risk Management, Compliance Management, or Information Security program/project management. Good understanding of information security controls across networks, systems, applications, and identity management. Experience developing, reviewing, and updating information security policies and procedures. Understanding of the Software Development Life Cycle (SDLC). Good English communication and technical reading skills. Strong analytical, planning, stakeholder-management, and cross-functional coordination skills. Strong management reporting and presentation skills. Able to work independently and collaboratively in a high-pressure environment with a strong commitment to confidentiality and information security. Preferred Qualifications Professional certifications such as CISSP, CISM, CRISC, CISA, or equivalent. Project management certification such as PMP is an advantage.