As the company continues its transformation into a global Digital Consumer Retail Company, Information Security plays a critical role in protecting customer data and business-critical information across the organization.
We are looking for an Information Security GRC Lead/Senior level to lead security governance initiatives across the Vietnam supply chain, covering production offices, factories, logistics providers, and transportation partners. This role focuses on strengthening security governance, managing compliance and risk, coordinating incident response, and driving security maturity across manufacturing and supply chain operations while collaborating with regional and global Information Security teams.
Key Responsibilities
Security Governance & Compliance
- Lead information security governance across Vietnam's manufacturing and supply chain ecosystem.
- Ensure compliance with corporate security standards and applicable cybersecurity/privacy regulations.
- Maintain governance frameworks, security policies, standards, and control processes for supply chain partners.
Risk Assessment & Vendor Security
- Conduct onsite and remote security assessments of factories, vendors, and logistics partners.
- Identify security risks, monitor remediation progress, and ensure timely closure of audit findings.
- Perform supplier/vendor security reviews and support third-party risk management.
Incident Management
- Coordinate security incident reporting, investigation, root cause analysis, and corrective actions.
- Work closely with factories and regional/global security teams during security incidents involving data leakage, system compromise, physical security, or other production-related risks.
Security Awareness & Stakeholder Management
- Act as the primary Information Security contact for Vietnam production teams and factory partners.
- Build strong relationships with factory management, production teams, and business stakeholders.
- Deliver security awareness training, incident response workshops, and Minimum Security Requirement (MSR) programs.
Security Program Deployment
- Support rollout and adoption of global security initiatives across Vietnam factories, including:
- Enterprise/Island Browser
- Account governance controls
- Security monitoring solutions
- Support additional regional or global Information Security projects as required.
Requirements
Education
- Bachelor's or Master's degree in Information Technology, Cybersecurity, Computer Science, Audit, or a related discipline.
Experience
- 7+ years of experience in Information Security Governance, Risk Management, Compliance, Audit, Third-Party Risk, or Vendor Security.
- Hands-on experience in:
- Information security governance frameworks (ISO 27001 or equivalent)
- Security risk assessments and remediation management
- Security compliance and audits
- Security incident response
- Security policy development and enforcement
- Supplier/vendor security governance
- Knowledge of Operational Technology (OT) environments and associated security risks is preferred.
Technical Knowledge
- Strong understanding of:
- ISO 27001 (or similar security frameworks)
- Information Security Governance
- Third-Party Risk Management
- Vendor Security Assessment
- Security Compliance & Audit
- Incident Response
- Cybersecurity & Privacy regulations
Language
- Business English (from TOEIC 700+)
Preferred Qualifications
- Professional certifications such as CISSP, CISM, CISA, or equivalent.
- Strong communication skills with both technical and non-technical stakeholders.
- Proactive mindset with the ability to drive continuous security improvements across a complex manufacturing and supply chain environment.
Ideal Background
Candidates with experience in one or more of the following areas would be a strong fit:
- Information Security Governance
- GRC (Governance, Risk & Compliance)
- Third-Party / Vendor Risk Management
- Manufacturing or Supply Chain Security
- Factory Security Governance
- Cybersecurity Audit & Compliance
- OT/Industrial Control System (ICS) Security
- Security Consulting (Big 4 or consulting firms)
- Retail, Manufacturing, Logistics, or Global Supply Chain environments
Benefit
- Fixed 13th month salary
- Annual performance bonus
- 24/24 Premium Health & Accidental Insurance (In Vietnam) & Overseas Business travel insurance
- Health, social & unemployment insurance (100% salary)
- Transportation & Parking allowance
- Company phone & laptop
- Language Support Program
