Purpose of Role:
Ensure PIPO VN IT/IS achieves and maintains compliance with SBV requirements, acting as a liaison between the PIPO global team and VN regulators for IT/IS audits.
Responsibilities:
- SBV Onsite Audit Support: 2 days per week for 2 months
- Review and revise the audit preparation documents.
- Identify compliance gaps and risks for audit readiness.
- Present audit packages to SBV during onsite inspections.
- Regular CIO Consulting Service: 1 day per week for 1 year
- Respond to SBV inquiries.
- Provide consulting services on VN data compliance obligations.
Languages:
Vietnamese + English, or Vietnamese + Chinese.
Knowledge and Skills:
- Excellent analytical and problem-solving skills, with a proven ability to work autonomously. The candidate should demonstrate self-motivation to achieve targets and the ability to work independently under pressure while handling complex IT challenges.
- Excellent communication skills (both verbal and written) with the ability to convey technical concepts to both technical and non-technical staff.
- Strong capability to manage risks in ambiguous and complex situations without direct oversight. The candidate needs to demonstrate a proactive approach to identifying potential challenges and devising strategic solutions independently.
- Demonstrated teamwork and collaboration skills, particularly contributing to global and cross-functional teams.
- Highly motivated to contribute and grow within a complex area of emerging importance.
Strong Understanding of:
- Comprehensive understanding of and compliance with local cybersecurity and data protection regulations, including the Vietnam Data Protection Law, Personal Information Protection, and Cybersecurity Law, along with relevant requirements set forth by the regulators.
- Industry standard frameworks (including PCI DSS, ISO 27001).
- Operating and maintaining tools across a range of security domains.
- A strong understanding of the Vietnamese digital landscape, including local market customer expectations and challenges faced in cybersecurity and data protection.
Minimum Requirements:
- 8-10 years of experience in infrastructure, Microservices, application design, deployment, and management across a range of IT architectures, including Cloud architecture, application stacks (including Cloud Native), Kubernetes, AWS, GCP, or OCI.
- High degree of integrity and trustworthiness, along with the ability to lead and inspire change.
- Strong leadership, communication, and project management skills.
- Demonstrated ability to quickly assimilate new knowledge and remain current on developments in cybersecurity capabilities and industry knowledge.
In-depth Experience In:
- Vulnerability management.
- Change management.
- Disk, file, device, and database encryption.
- Microservice architecture.
- Logging, monitoring, and security event management.
- Database management and administration.
- Product management and support.
Feel free to contact with me at: [Confidential Information] or 0949.469.617
