IT Governance Risk Compliance (IT GRC)

Job Objectives:
Job Purpose:
Responsible for supporting the implementation of policies, procedures, and activities related to Information Security (IS) across the organization. Acts as the focal point between the HR Department and IT/Tech Departments to ensure awareness, training, and compliance with information security regulations throughout the company.
Key Responsibilities:

Support the HR department in updating/improving work processes.
Participate in developing onboarding/offboarding processes to ensure security measures (e.g., account, device, and data revocation).
Stay updated on standards, knowledge, and legal regulations related to personal data protection (e.g., Decree 13/2023/NĐ- CP).
Develop and disseminate internal information security policies in accordance with ISO/IEC 27001.
Plan and organize regular information security training sessions for all employees.
Organize awareness- raising activities such as Security Day, IS newsletters, and surveys.
Collaborate with IT/Tech teams to implement security programs, including testing and attack simulations (e.g., phishing simulation, security drills).
Monitor, record, and report non- compliance with information security policies.

Workplace: 568 Luy Ban Bich, Hoa Thanh Ward, Tan Phu District, HCM City.
Working hours: Monday – Friday (8:00 AM – 5:00 PM). Saturday mornings (8:00 AM – 12:00 PM).

Job Requirements:

Knowledge of security standards: ISO/IEC 27001, 27005, OWASP, DevSecOps.
Preference given to candidates with experience in implementing IS policies or working with IT/Tech software teams.
Ability to manage small projects, coordinate across departments, and handle sensitive issues.
Strong communication skills, with the ability to train and influence within the organization.
Bachelor’s degree in Information Security or a related field.

Laptop, Chế độ bảo hiểm, Phụ cấp, Chế độ thưởng, Đào tạo, Tăng lương, Nghỉ phép năm

Cập nhật gần nhất lúc: 2025-10-04 22:40:02