Assistant Internal Control and Information Risk Management Manager

Location : HCMC
Report to : Manager, Internal Control and Information Risk Management

Job Summary

Internal Control function was established in Jan 2013, under CEO’s responsibility, for fulfilling requirement of Local regulation (SBV Cir 44). This jobholder will develop and maintain an Internal Control system which successfully combines the ability to detect major control weaknesses and minimise related control failures within Shinhan Vietnam Finance Company Ltd [SVFC], with the knowledge and banking sector experience to support and guide the businesses in achieving their objectives.
In the meantime, Internal Control Unit will take oversight charge of Information Risk and Data Privacy Management (IRM) of Shinhan Vietnam Finance in accordance with Company and Group guidance and plan. This role will work closely with IT Department and Operational Risk Management to ensure safety on information and data transfer and control.

JOB RESPONSIBILITIES

1. Internal Control
1.1 Internal Control review:
 Conducte routinely and adhoc internal control review to provide independent and objective assurances on business operation.
 Apply appropriate review approach to:
 Evaluate the effectiveness and efficiency of business operation
 Identify risk, vulnerability and weaknesses of Company’s control framework
 Assess the compliance with regulation, global and internal policies
 Provide advice, suggestion to improve any gap or weakness of control framework identified during the review or consulting activity/control designed to add value organization's operations.
 Ensure sufficient and relevant work to be performed to support the conclusions
 Make accurate and comprehensive reports of any findings.
 Continuously monitor and follow-up mediation plan to ensure all recommendation, corrective action properly implemented
 Conduct adhoc review, risk assessment, data analysis and other tasks as Internal Control Manager assigned
1.2 Reporting:
 Be responsible for all regulatory reports related to Internal Audit and Internal control system. Ensure the report timely be sent to SBV and other regulators.
 Prepare response to external audit and adhoc global requirements

2. Information Risk and Data Privacy control:
Support IC manager on controlling information risk and data privacy, including but not limited to:
a) Coordinate and submit regular reporting requirements to Information Risk and Privacy policy, including UDA Register, Sensitive Information transfer register, and Incident reporting
b) Coordinate and report (through normal Local Unit reporting framework) half year Turnbull and end year Governance exemptions related to information risk.
c) Coordinate completion of training and awareness for Annual Computer Based Training (CBT) and acknowledgement process, Signing of Information Security Code of Practice (ISCoP), and other required training.
d) Coordinate and support the implementation of Information Risk and Privacy policies and guidance.
e) Monitor the implementation of Privacy standards, policies and procedures within company
f) Work with relevant team to ensure the company has and maintains appropriate privacy and confidentiality consent
g) Provide Privacy advice support and regular training for staff
h) Participates in the development and implementation of all company’s agreements to ensure that all privacy concerns, requirements and responsibilities are addressed
i) Initiates activities to foster privacy awareness within company

1. Education Background
University graduated, preferable business course degree holder
Qualified CIA, ACCA, CISA is an advantage

2. Minimum Experience
Prior experience over 3 – 5 years in internal/ external audit major in banking sector, risk management functions or IT audit role is an advantage.

3. Minimum Qualifications (Knowledge , Skill, Abilities)
Broad knowledge of financial services,
Understanding banking / consumer finance regulations and products; compliance regime; risk management, audit techniques
PC proficiency and excellent organization skills
Ability to speak and write in English at advance level

4. Other requirements
Integrity, innovative, customer service, collaborative
Should be confident, aggressive and have a flair for Team Management.
High awareness of code of ethics is necessary and appropriate for the professional review conducting.
This job description is reviewed on annually basis and subject to change upon business requirement.

- Attractive salary and bonus
- Health insurance and Social insurance regulated by Vietnam Labor Law
- Professional, dynamic working environment

Hồ sơ theo yêu cầu của nhà tuyển dụng khi liên hệ trực tiếp