GRC & Security Consultant

JOB
PURPOSES:
Ensure the organization’s compliance with ISO 27001, SOC 2 readiness, and data protection regulations.Support IT risk assessment, audit coordination, and security governance activities.
PRINCIPAL ACCOUNTABILITIES:
Governance & Compliance

Perform periodic access reviews to ensure adherence to the principle of least privilege.
Update and maintain information security policies and standards.
Maintain and support internal audits of ISO/IEC 27001:2022 and assist in annual external audits.
Ensure compliance with Decree 13/2023/ND‑CP and other applicable data protection regulations.
Support SOC 2 readiness activities and evidence collection in coordination with technical teams.

Risk Management

Collaborate with stakeholders to develop risk treatment plans and track remediation progress
Conduct regular IT systems and process risk assessments using established frameworks.

Security Assessment & Client Support

Coordinate responses to security questionnaires and customer/vendor assessments.
Act as a liaison between auditors and technical teams to review and validate evidence.

Incident, Continuity & Audit Support

Track internal and external audit findings and ensure corrective actions are completed on time

Security Awareness

Deploy and manage security awareness training programs for employees.

ISO 27001 Internal Auditor or similar. Experience participating in ISO 27001 audits or implementation projects. (nice to have)
Bachelor’s degree with major in in Information Security, Computer Science, IT Management or related fields.
Growth Mindset & One- Team Mindset
Minimum 3 years of experience working in IT GRC, Information Security, IT Audit or related fields.

Laptop, Chế độ bảo hiểm, Du Lịch, Phụ cấp, Chế độ thưởng, Chăm sóc sức khỏe, Đào tạo, Tăng lương, Phụ cấp thâm niên, Nghỉ phép năm, CLB thể thao

Cập nhật gần nhất lúc: 2026-02-12 09:30:05