IT Governance & Compliance Manager is responsible for establishing, implementing, and maintaining the bank's IT governance framework and ensuring compliance with regulatory requirements, internal policies, and industry standards. The role ensures that IT operations align with business objectives while minimizing risks and maintaining strong controls.
Responsibilities:
IT Governance Framework
- Develop and maintain IT governance policies, standards, and procedures aligned with:
- Bank strategy
- Regulatory requirements (e.g., SBV, Basel, local banking laws)
- Implement frameworks such as:
- COBIT (IT Governance)
- ISO 27001 (Information Security)
- ITIL (Service Management)
- Ensure alignment between IT and business goals
Regulatory Compliance
- Ensure compliance with:
- Central bank regulations (e.g., State Bank of Vietnam or equivalent)
- Data protection laws (e.g., PDPA/GDPR)
- Internal audit and external regulatory requirements
- Prepare compliance reports for regulators and executive leadership
- Liaise with regulators, auditors, and compliance bodies
IT Risk Management
- Identify, assess, and monitor IT risks:
- Cybersecurity risks
- Data privacy risks
- System and operational risks
- Define and enforce risk mitigation controls
- Maintain IT risk registers and reporting dashboards
Audit & Assurance
- Manage IT audits (internal & external)
- Track audit findings and ensure timely remediation
- Perform regular control testing and compliance reviews
- Support certification processes (ISO, SOC, etc.)
Policy & Control Management
- Develop and enforce IT policies:
- Access control
- Change management
- Data governance
- Ensure policies are continuously updated and communicated
Stakeholder Management
- Collaborate with:
- IT teams (Infrastructure, Security, Application)
- Risk Management, Legal, Compliance
- Internal Audit
- Provide advisory on IT compliance matters to business units
Qualifications & Experience
Education
- Bachelor's or Master's degree in:
- Information Technology
- Computer Science
- Information Security
- or related fields
Experience
- 7-10+ years in:
- IT Governance / IT Risk / IT Compliance
- Banking or financial services environment
- Experience working with regulators and audits is required
Certifications (Preferred)
- CISA (Certified Information Systems Auditor)
- CISM or CISSP (Information Security)
- CGEIT (IT Governance)
- ISO 27001 Lead Implementer / Auditor
Technical Skills
- Knowledge of:
- IT governance frameworks (COBIT, ITIL)
- Risk management methodologies
- Cybersecurity principles
- Understanding of banking systems and digital platforms