Quality Assurance (Compliance)

ABOUT THE JOB
Develop, document, and maintain operating procedures and testing guidelines for IT controls and compliance activities, covering SDLC, Change Management, user access reviews, user provisioning and deprovisioning, and privileged access management.
Perform risk-based SDLC compliance reviews for critical applications, ensuring that User Stories, release notes, SIT/UAT results, approvals, testing evidence, and deployment records comply with established standards.
Conduct monthly SOX-related user access reviews by examining system logs, access request tickets, approval records, and user authorization to identify and investigate unsupported access.
Monitor user access revocation for terminated employees, coordinate with Line Managers on pending requests, and verify that access is removed within the required three-day timeline.
Support SDLC standardization initiatives by conducting gap assessments, enhancing procedures and templates, and developing compliance checklists and monitoring guidelines.
Maintain QA trackers, testing results, control evidence, exception logs, root-cause analyses, and remediation plans, ensuring identified issues are tracked through to closure.
Prepare periodic quality assurance and compliance reports, identify recurring control weaknesses, and escalate overdue or high-risk exceptions to management.
Collaborate with Technology Delivery teams, application owners, IAM, Information Security, Risk, Compliance, and auditors to collect evidence, validate control effectiveness, and drive corrective actions.
ABOUT YOU
Bachelor's degree in Information Technology, Information Systems, IT Risk Management, Auditing, or a related discipline.
At least 4-5 years of relevant experience in Quality Assurance, IT controls, IT audit, technology risk, , SOX/ITGC, or Compliance Testing.
Working knowledge of SDLC, Change Management, Identity and Access Management (IAM), user provisioning and deprovisioning, User Access Reviews (UAR), privileged access management, and vendor access controls.
Experience reviewing system logs, access request tickets, approval records, testing evidence, and deployment documentation to assess control compliance and identify exceptions.
Strong analytical skills, attention to detail, professional skepticism, and the ability to investigate root causes, maintain audit-ready documentation, and follow up on remediation actions.
Good stakeholder management and written communication skills in English; Vietnamese communication skills are preferred.
Proficiency in Microsoft Excel and collaboration or workflow tools. Experience with Jira, IAM platforms, CyberArk, or Governance, Risk, and Compliance (GRC) tools is an advantage.
Familiarity with frameworks such as COBIT, ITIL, ISO 27001, or NIST is preferred. Relevant certifications such as CISA, CRISC, or CIA are an advantage.
WHY AMARIS?
Competitive salary and 13th-month salary
14+ annual leaves per year
Premium healthcare insurance, starting from your probation period
Project reviews and yearly performance appraisals
Annual company trips
Teambuilding activities: Team lunch/dinner, events, and celebrations, sports clubs (football, yoga, badminton, etc.)
International team with flexible working time
Tailor-made career path
Technical workshops and training courses
Mobility: Opportunities to be on-site abroad in our offices in over 60+ countries
Equal Opportunity
Amaris Consulting is proud to be an equal opportunity workplace. We are committed to promoting diversity within the workforce and creating an inclusive working environment. For this purpose, we welcome applications from all qualified candidates regardless of gender, sexual orientation, race, ethnicity, beliefs, age, marital status, disability, or other characteristics.