This position is no longer open for applications

About the IT GRC Manager Role:

You will be responsible for driving IT risk initiatives internally and externally, improve governance and minimise the level of potential exposure to the organisation.

Key Responsibilities:

• Conduct autonomous risk evaluations pertaining to project completion, third-party service providers, and business workflows. Furnish senior stakeholders with insights regarding pivotal controls and plans for remediation
• Collaborate with Executive Leadership, senior stakeholders, and external entities (e.g., Auditors, Security Assessors/Practitioners) to devise and execute inventive Governance frameworks and Risk mitigation strategies. These initiatives aim to curtail company's risk exposure and enhance adherence to legal and regulatory frameworks if absent
• Establish connections within ITS teams to comprehend their operational processes and objectives, identifying challenges and alternative solutions while providing advisory support
• Execute routine compliance reviews and reporting for the ITS operational landscape (e.g., applications, networks, cloud platforms, databases), gauging conformity with company policies, standards, and pertinent regulations.
• Provide assistance in project life-cycle management, incorporating risk assessments and compliance evaluations during distinct phases
• Collaborate closely with Central Risk Management, Procurement, Internal Audit, and Legal divisions to derive compliance benchmarks from legislative mandates and corporate objectives
• Lead the execution and reporting of outcomes derived from Third Party Risk Assessments
• Play a vital role in enhancing the GRC function, leveraging a comprehensive understanding of modern technology governance, risk & compliance management methodologies

To succeed in this role, you must have at least 10 years in ICT industry.

Key Requirements:

• Extensive and verifiable track record in crafting, implementing, and overseeing extensive IT risk management strategies (e.g., COBIT), Governance practices, and Audit procedures
• Profound familiarity with Vietnamese regulations governing cyber and data, along with corresponding international benchmarks
• Proven experience collaborating with both internal and external auditors
• Proficiency in English, coupled with adept skills in persuasion and negotiation
• Display a mature approach to stakeholder engagement and exhibit acute problem-solving capabilities
• Formulate, enact, steer, and supervise the execution of governance, risk, and compliance management protocols within the portfolio and planning division
• Proficiency in conducting third-party risk assessments, encompassing vendor collaboration, identification of issues, and formulation of actionable recommendations
• Demonstrated extensive knowledge of IT best practices, Cybersecurity, Cloud technologies, and risk management.
• Exhibit a capacity for unconventional thinking and making informed decisions even when information is limited.
• Ability to thrive within a collaborative team environment, engaging with executive leadership and senior management effectively
• Showcase adeptness in task prioritization, ensuring the delivery of high-quality outcomes
• Possess exceptional interpersonal, communication, and negotiation proficiencies, enabling effective liaison with Executive Leadership, Deans/Directors, senior stakeholders, and external counterparts to proactively pinpoint and resolve issues

This company needs no introduction and is well known in its industry.

If you are driven, determined and want to take the next step in your career, this is the role for you. Great career progression opportunities await the right person in this exciting IT GRC Manager job.

Apply today or call me to discuss this new opportunity.