IT GRC Specialist

CAEX | IT GRC SPECIALIST
Working Location: Hanoi
Objective:
Act as a Senior Cybersecurity Governance, Risk & Compliance (GRC) professional, responsible for supporting and implementing cybersecurity governance, risk and compliance frameworks, evaluating security controls, supporting Identity & Access Management, and ensuring security compliance requirements are effectively implemented to minimize cybersecurity risks.
Responsibility:
Develop, maintain and implement Cybersecurity Risk & Compliance frameworks, policies, standards, processes and guidelines.
Coordinate with Risk, Internal Audit and relevant stakeholders on scheduled and ad-hoc cybersecurity compliance activities.
Identify, record, track and follow up cybersecurity risks, findings and compliance gaps to ensure timely remediation.
Provide cybersecurity advisory and define security requirements for new and existing systems.
Support and maintain compliance with PCI DSS, ISO 27001, SBV regulations and relevant cybersecurity standards.
Support Identity & Access Management (IAM), access controls, user-role matrix review and third-party cybersecurity risk management.
Develop and implement Cybersecurity Awareness programs and keep the content aligned with current cybersecurity threats.
Develop and maintain security metrics, SLA, KRI, RPO, RTO and security dashboards, including vulnerability and compliance monitoring.
Prepare regular and ad-hoc IT security and regulatory reports.
Coordinate with stakeholders and support cybersecurity initiatives/projects to strengthen the organization's cybersecurity posture.
Requirement:
Bachelor's or Technical degree in IT, Cryptography, Computer Science, Information Systems, Business Administration or related disciplines.
5+ years of experience in IT/Cybersecurity, preferably in banking or financial services.
3+ years of experience in at least one of the following areas: Identity & Access Management, Risk Management, Compliance Management or Program Management.
Good knowledge of cybersecurity risk, compliance, access management and third-party risk management.
Knowledge of ISO 27001, PCI DSS, SBV regulations, NIST and CIS frameworks.
Basic technical knowledge of security controls for network, systems, applications and identity management.
Experience in developing, reviewing and updating IT security policies, procedures, processes, standards and regulations.
Good understanding of cybersecurity defense models and software development lifecycle.
Strong stakeholder management, communication, planning, coordination and risk management skills.
Ability to read and understand professional documents in English, prepare reports and work independently under pressure.
IT Security or Project Management certifications are an advantage.
About CAEX:
Vietnam Prosperity Crypto Asset Exchange Joint Stock Company (CAEX) is a member of VPBank's financial ecosystem. Established with the vision of building a transparent and secure crypto asset trading platform for Vietnamese investors. Led by VPBankS, LynkiD and strategic partners, OKX Ventures and HashKey Capital, CAEX brings together an experienced team of professionals in finance, technology and cybersecurity, with the goal of contributing to the sustainable development of Vietnam's digital financial ecosystem.
With a technology infrastructure built to international standards, CAEX aims to deliver a seamless, reliable, and secure crypto asset trading experience. CAEX is not just an exchange, but a bridge connecting the traditional financial ecosystem with crypto asset economy - one in which transparency, legal compliance, and the protection of investors are top priorities.
How to Apply: Plesase send your update CV to email: [protected info]. Subject: [Job Position_Your Fullname]