Senior GRC Specialist (Cyber Security)

About the role

As a Senior GRC Specialist you will be the airport’s authority for translating regulatory obligations and enterprise risk appetite into a working, auditable control environment across enterprise IT, cloud and operational technology. Your mission is to embed compliance into day‑to‑day operations so that it becomes a natural by‑product of well‑run processes.

Key responsibilities

• Interpret Vietnamese cyber‑security laws, Decree 85/2016, Decree 53/2022 and data‑privacy regulations and convert them into concrete controls.
• Design, implement and maintain an Information Security Management System (ISMS) aligned with ISO/IEC 27001.
• Lead at least one full ISO/IEC 27001 certification cycle, ensuring continuous improvement.
• Conduct risk assessments, gap analyses and compliance audits across IT, cloud and OT environments.
• Collaborate with IT, cloud and OT teams to remediate findings and monitor control effectiveness.
• Produce regular compliance and risk‑management reports for senior airport management.

Required profile

• Bachelor’s degree in Information Security, IT, Engineering, Law or Audit.
• Minimum 6 years of experience in cyber‑security governance, risk and compliance, IT audit or ISMS management.
• Hands‑on ownership of an ISMS through at least one ISO/IEC 27001 certification cycle.
• Working knowledge of the Law on Cyber Security, Decree 85/2016, Decree 53/2022 and PDPD/PDPL.

Required skills

• Cyber Security Governance
• Risk Management
• Compliance Auditing
• ISMS Management
• ISO/IEC 27001 implementation
• Understanding of Vietnamese cyber‑security legislation