Head of Risk

About the Role

We are seeking an experienced and forward-thinking Head of Risk & Audit - Technology to lead the development, implementation, and continuous improvement of our technology risk management and assurance framework. This role will oversee risk, audit, and internal controls across our digital banking technology ecosystem, with a strong focus on data engineering, AI-driven solutions, technology engineering practices, and automation for risk monitoring and reporting.

As a senior member of the team, you will partner with engineering, data, security, compliance, and business stakeholders to ensure our systems and processes are resilient, well-controlled, and future ready.

Key Responsibilities

Risk Management Program

• Support the Group CRO in management of technology risk across the group.

• Design, implement, and maintain a comprehensive Technology Risk Management Program aligned with group standards and best practices in digital banking.

• Identify, assess, and monitor risks across data engineering, AI/ML, cloud infrastructure, and core banking technology platforms.

• Develop metrics, dashboards, and automated monitoring tools to provide real-time visibility of risk exposure.

Internal Controls & Assurance

• Establish and maintain an Internal Control Framework covering engineering processes, data pipelines, AI models, and IT operations.

• Lead the assurance program around SOC 2 work and work with the internal control teams to streamline the processes.

• Conduct continuous assurance activities leveraging automation, bots, and data-driven testing.

• Lead control design and validation, ensuring alignment with operational resilience and compliance requirements.

• Collaborate with Group Cyber team in management of Cyber Risk.

Audit & Oversight

• Develop and execute the Technology Audit & Assurance Plan, focusing on highrisk and emerging technology areas.

• Provide independent oversight of engineering practices, data governance, AI model lifecycle management, and system reliability.

• Prepare and present reports to senior management and risk committees, offering actionable recommendations.

Automation & Innovation

• Champion the use of AI, bots, and automated risk reporting solutions to enhance assurance capabilities and reduce manual eKort.

• Collaborate with engineering and data science teams to design controls embedded into technology pipelines and systems.

• Stay current with regulatory developments and industry innovations in risk, audit, AI governance, and technology assurance.

Requirements

• Education: Bachelor's or master's degree in computer science, Engineering, Risk Management, or related field. Professional certifications (e.g., CISA, CRISC, CIA, CISSP) preferred.

• Experience: 8+ years in risk management, audit, or assurance within technology, fintech, or digital banking environments.

• Proven expertise in:

o Technology risk management and internal control frameworks.

o Data engineering, AI/ML model governance, and cloud environments.

o Continuous assurance, automated risk monitoring, and reporting tools.

o Regulatory and compliance frameworks relevant to banking and financial technology.

• Skills & Competencies:

o Strong analytical and problem-solving skills with a data-driven mindset.

o Ability to design and implement automated assurance solutions.

o Excellent communication and stakeholder management at executive level.

o Leadership capability to manage cross-functional risk and audit initiatives.

Benefits

• Meal and parking allowance are covered by the company
• Full benefits and salary rank during probation
• Insurances as Vietnamese labor law and premium health care for you and your family without seniority compulsory
• Performance bonus up to 2 months
• 13th month salary pro-rata
• 15-day annual leave+ 3-day sick leave + 1 birthday leave + 1 Christmas leave
• SMART goals and clear career opportunities (technical seminar, conference, and career talk) – we focus on your development
• Values-driven, international working environment, and agile culture
• Overseas travel opportunities for training and working related
• Internal Hackathons and company's events (team building, coffee run, blue card…)
• Work-life balance 40-hr per week from Mon to Fri