IT GRC Specialist (SDE 3)

• Serve as the primary point of contact for all internal and external audit activities related to international entities.
• Coordinate end-to-end audit processes, including scope alignment, scheduling, evidence collection, issue tracking, and closure.
• Collaborate effectively with Internal Audit, External Auditors, and third-party assessors to facilitate smooth and timely assessments.
• Ensure audits stay aligned with agreed scopes while maintaining strong professional relationships with all audit stakeholders.
• Evaluate audit findings and work with cross-functional teams to define and implement corrective actions, ensuring alignment between audit results and actual implementation across the organization.

• Conduct regular internal evaluations and risk assessments of IT and security controls to identify gaps and opportunities for improvement.
• Implement and monitor adherence to Kredivo Group's security policies and procedures, ensuring both local compliance and global alignment.
• As main PIC compliance support for any country-specific regulatory requirements (e.g., State Bank of Vietnam) and lender-related audits, acting as the key liaison for international entities.
• Maintain structured and auditable documentation, trackers, and progress reports for all IT GRC activities in the international markets.

• Support the enhancement and localization of the Information Security Compliance Program to meet both global and region-specific requirements.
• Perform and support access control reviews, enforcement of least privilege, and policy implementation-particularly in cloud, infrastructure, and endpoint environments.
• Work closely with the Security Awareness team to tailor campaigns for international teams and track their effectiveness.
• Design and maintain IT risk frameworks, and prepare clear reporting on audit status, control effectiveness, and compliance activities for internal stakeholders and leadership.
• Ensure all documentation, evidence, and review records are clear, auditable, and accessible for internal reviews or external assessments.

• Minimum 5+ years of experience in IT GRC, information security, or IT audit roles-preferably within Big4 consulting firms.
• Proven experience in IT GRC, information security, or IT audit roles-preferably within financial services, fintech, or Bank industries.
• Strong understanding of industry-recognized security frameworks (e.g., ISO 27001, NIST, PCIDSS, COBIT) and relevant regulatory requirements (e.g., Local Regulation, GDPR, etc.).
• Hands-on experience in coordinating and responding to audits, including internal audits, external assessments, and regulatory reviews.
• Excellent communication in English, interpersonal, and organizational skills, with the ability to engage effectively with both technical and non-technical stakeholders.
• Self-motivated, detail-oriented, and able to manage multiple priorities with minimal supervision.
• Prior experience working in a Big Four consulting or audit firm, especially in roles involving IT audit, risk, or compliance.
• Adept at acting as an internal consultant to cross-functional teams, providing expert guidance on IT GRC and security-related matters.

Kredivo Group