Tuyển dụng Operational Risk Officer tại Hồ Chí Minh

Main tasks:

• Develop and maintain personal data protection governance framework, policies, standards and procedures to ensure compliance with applicable laws and regulations, including but not limited to Personal Data Protection Law (PDPL), Data Law (DL), Data Security Law (DSL) and related guidance, as well as Head Office requirements.

• Act as the focal point for coordinating and communicating with competent authorities, including the Ministry of Public Security (MPS) and the State Bank of Vietnam (SBV), on matters relating to personal data protection.

• Work closely with business, technology, and support functions to provide advice and ensure Privacy by Design (PbD) principles are embedded into new products, services, projects, business processes, and systems, and to implement and monitor technical and organizational measures, security standards, and data protection controls.

• Lead Compliance Assessment, Personal Data Protection Impact Assessments (DPIA), Overseas Data Transfer Impact Assessment (OTIA) and other relevant periodic assessments as regulated.

• Incident Management and Response: Establish and follow procedures for the detection, classification, and handling of personal data breaches or losses. Report incidents and remediation results to internal stakeholders and competent authorities within the timelines prescribed by applicable regulations.

• Coordinate responses to regulatory inquiries, inspections, audits, and other requests from competent authorities concerning personal data protection.

• Coordinate and manage Data Subject Rights Requests.

• Manage third-party risks associated with personal data processing activities, including due diligence, contractual safeguards, incorporation of data protection requirements into agreements, information security assessments, and periodic compliance reviews.

• Conduct research and provide recommendations on matters relating to personal data protection.

• Monitor and update changes in regulations and relevant laws, and promptly recommend revisions to internal regulations to ensure alignment with legal developments and regulatory requirements imposed by competent authorities.

• Training and Awareness: Conduct internal training sessions on personal data protection, develop guidance materials and e-learning programs; Attend external traning for profesional enhancement.

• Perform backup tasks for operational risk management (RCSA, BCP, KRI management, Outsourcing, …).

• Other responsibilities per internal requirements (if any).

Requireme

Yêu cầu công việc

Requirements:

• Proficient in both written and spoken English and Vietnamese; Chinese is an advantage.

• +5 years of professional experience, including +3 years in Data Privacy, Operational Risk, Compliance, or related fields. Experience in the banking or financial services industry is highly preferred.

• Strong knowledge of Vietnam's personal data protection regulations, as well as current and emerging laws and regulations relating to data privacy, data governance, cybersecurity, and information security.

• Hands-on experience in conducting Compliance Assessment, Data Protection Impact Assessments (DPIA), Overseas Data Transfer Impact Assessments (OTIA), and data governance initiatives is preferred.

• Strong stakeholder management and communication skills, with the ability to collaborate effectively across business, technology, and control functions.

• Excellent analytical, problem-solving, and risk assessment capabilities.

• Ability to interpret regulatory requirements and translate them into practical business and operational controls.

• Self-motivated, detail-oriented, and capable of managing multiple priorities in a dynamic regulatory environment.

Nice-to-have:

• Personal Data Protection Training Certification and/or International standard qualification (CIPM, CIPP/A, CIPP/E, ISO27701, ISO27001,…or equivalent) is an advantage.

Quyền lợi

• Thưởng: Performance review
• Chăm sóc sức khoẻ: Cathay insurance
• Đào tạo: Domestic and oversea training