Security Specialist

About Money Forward
Money Forward operates a broad portfolio of services used by millions of people, including the personal finance and asset-management app "Money Forward ME" and the business cloud suite "Money Forward Cloud." These services are powered by our own technologies such as account aggregation and the "Money Forward ID" single sign-on. Because most of these services handle users' financial information, they demand an exceptionally high level of security.Money Forward Vietnam (MFV) is the group's development base in Vietnam, building products and platform capabilities for the wider Money Forward group. As MFV grows, we are strengthening the security and governance functions we operate locally.
Why We Are Hiring
We are hiring one Corporate Security Lead to lead and grow the Corporate Security & Governance function at MFV. This person will:
Belong to the CISO Office team as the dedicated focal point for MFV in Vietnam - working with the CISO team to deploy the group's overall security approach locally, and feeding local context back to strengthen synergy across the group.
Gradually build up expertise and, over time, take ownership of security incident handling, focused primarily on MFV.
Work alongside the existing security members to drive security improvements at MFV, collaborating on security education and training tailored to MFV's current situation.
Lead a small local security team (-2 people), coordinating work assignments and representing the team to upper management and other stakeholders.
About the CISO Office
With the mission "Maximize the value we deliver to customers through security," the CISO Office defines how security should work across the entire Money Forward group.
Keeping services running and preventing information leaks matter deeply-but they are only part of what we care about. Excessive security controls can slow development and reduce or delay the value we deliver to customers. As security professionals, we constantly weigh risk and design the security that is genuinely optimal for our customers.
Our security principles
Embedded security in business strategy - Security is never considered in isolation. We design security measures together with the business strategy: the current business phase, cost, expected future revenue scale, and the potential losses if a risk materializes.
Advanced balancing between security and experience - The strongest possible security is not always the right answer, as it raises cost and can harm usability. We assess risk and choose the optimal measures-sometimes taking on risk to pursue maximum user value-and drive automation to reconcile usability and security at a high level.
Autonomous and scalable security organization - As the group's development organization grows, a CISO Office that owns every security function would become a bottleneck. Each development team must be able to build secure services autonomously, and the CISO Office builds the mechanisms and support that make this possible.
What You Will Do
Drawing on your knowledge and experience in information security, coding, and infrastructure, you will maintain and improve Money Forward's security in close collaboration with the Global IT department and the CISO Office. Your responsibilities include:
Work closely with the CISO Office in Japan on corporate security and security governance, reporting into the CISO Office while coordinating day-to-day with MFV leadership locally - ensuring effective cross-border collaboration and contributing to group-wide (global) security matters.
Partner with the CISO team to deploy the group's overall security approach locally at MFV, while feeding local context back to support synergy across the group.
Operate and manage security tooling such as EDR, SWG/DLP, and MDM.
Perform security risk management for internal systems and external SaaS usage.
Build controls that comply with security guidelines and governance requirements.
Respond to security incidents for internal systems, progressively taking ownership of incident handling at MFV.
Plan and drive device security measures.
Implement and roll out frameworks such as NIST CSF and CIS Benchmarks.
Gather information on and validate new technologies from major vendors (e.g., Microsoft).
Collaborate with the existing team to design and deliver security education and training suited to MFV's situation.
Lead and coordinate the local security team's work assignments, balancing priorities across ongoing operations, incidents, and stakeholder requests.
Act as the primary point of coordination between the local team and upper management/other stakeholders, translating business priorities into team assignments and communicating progress back.