Information Security Specialist (GRC & Supply Chain Security)

Our client is a global leader in manufacturing & logistics undergoing digital transformation. The Information Security team safeguards critical data while enabling secure growth across production and external partner networks. We are seeking an Information Security Specialist to spearhead security governance, risk management, compliance, and incident response in Vietnam

About the Opportunity Our client is a global organization undergoing large-scale digital transformation across its international operations and supply chain network. The Information Security team protects sensitive business and customer information while enabling secure growth across production facilities and logistics providers. We are seeking an experienced Information Security Specialist to support security governance, risk management, compliance, and incident management initiatives in Vietnam.

Key Responsibilities

• Maintain and enhance information security governance frameworks across supply chain operations.

• Monitor compliance with internal security standards, regulatory requirements, cybersecurity laws, and privacy regulations.

• Act as the primary Information Security representative for local manufacturing sites, logistics partners, and third-party vendors.

• Conduct security assessments, vendor audits, investigations, and risk reviews.

• Track remediation activities and drive timely closure of security findings.

• Coordinate incident reporting, investigation support, root cause analysis, and corrective actions.

• Deliver security awareness programs, incident response workshops, and security training initiatives.

• Support deployment and adoption of global security programs across manufacturing and supply chain partners.

• Collaborate with regional and global security teams to manage security risks and incidents.

Requirements

• Education: Bachelor's or Master's degree in Information Technology, Information Security, Computer Science, Audit, or related fields.

• Experience: Minimum 5 years of experience in Information Security Governance, Risk Management, IT Audit, Compliance, Third-Party Security, or related areas.

• Strong knowledge of ISO 27001 or equivalent information security frameworks.

• Experience in security risk assessment, remediation management, incident response, and vendor security audits.

• Knowledge of Operational Technology (OT) environments is highly desirable.

• Language: Business-level English communication skills (equivalent to TOEIC 700+).

• Preferred Qualifications: Professional security certifications such as CISSP, CISM, CISA, ISO 27001 Lead Auditor, or TPRM experience.

Suitable Backgrounds

• Information Security Governance (GRC) / Cyber Risk Consulting (Big 4)

• IT Audit / Security Compliance / TPRM / Vendor Security Assessment

• ISO 27001 Lead Implementer / Lead Auditor

Compensation & Benefits

• Competitive salary package (negotiable based on experience).

• Performance bonus and annual bonus scheme.

• Premium healthcare and accident insurance.

• Transportation allowance, company laptop, and mobile phone support.

• Professional development and language learning support.

Additional Details

• Location: Ho Chi Minh City

• Working Model: Full-time

• Reporting Line: Local and Regional Information Security Leadership Teams

Due to the high volume of applications we are experiencing, our team will only be in touch with you if your application is shortlisted.