{"id":16546,"date":"2026-10-16T09:43:05","date_gmt":"2026-10-16T02:43:05","guid":{"rendered":"https:\/\/galaxyholdings.co\/?post_type=job&p=16546"},"modified":"2026-10-16T09:43:05","modified_gmt":"2026-10-16T02:43:05","slug":"senior-integrated-risk-management-technology-operation-enterprise","status":"publish","type":"job","link":"https:\/\/galaxyholdings.co\/en\/job\/senior-integrated-risk-management-technology-operation-enterprise\/","title":{"rendered":"Senior Integrated Risk Management (Technology, Operation & Enterprise)"},"content":{"rendered":"

Position Overview:<\/span><\/strong><\/h2>\n
    \n
  • Develop, implement, and enhance the organization-wide integrated risk management framework, focusing on technology, operational, enterprise, third-party risks, and operational resilience.<\/li>\n
  • Act as a specialist responsible for conducting independent analysis, assessment, and monitoring, providing evidence-based challenge to the first line’s risk assessments and risk acceptance decisions.<\/li>\n
  • Independently oversee risks across infrastructure, core banking, digital banking, payments, cloud, APIs, data, AI, and emerging technologies throughout the entire technology lifecycle.<\/li>\n
  • Operate RCSA, KRI\/KCI, scenario analysis, incident\/loss management, and remediation tracking; consolidate the organization-wide risk profile to identify concentration risks and cascading impacts.<\/li>\n
  • Assess risks associated with new products, material changes, digital transformation projects, and vendors\/third parties; provide independent risk opinions before approval.<\/li>\n
  • Report integrated risks, early warnings, and recommendations to Executive Management, the Risk Committee, and the Board of Directors; promote a risk management culture.<\/li>\n<\/ul>\n

    Key Responsibilities:<\/span><\/h2>\n

    1. Technology Risk and Operational Risk Management<\/span><\/h2>\n
      \n
    • Develop and maintain the Technology Risk & Operational Risk Management Framework, taxonomy, assessment methodologies, KRIs, limits, and alert thresholds.<\/li>\n
    • Conduct independent second-line oversight of infrastructure, networks, databases, core banking, digital banking, payments, cloud, APIs, DevSecOps, and data platforms.<\/li>\n
    • Organize RCSA by business unit\/process\/system; develop a risk-control library, loss database, and control issue register.<\/li>\n<\/ul>\n

      2. Operational Resilience<\/span><\/h2>\n
        \n
      • Develop the Operational Resilience Framework; identify critical business services and the maximum tolerable level of disruption.<\/li>\n
      • Map dependencies across people, processes, technology, data, and vendors; establish impact tolerances, RTO, and RPO.<\/li>\n
      • Independently assess BCP, DRP, crisis management, backup, and data recovery capabilities; coordinate severe but plausible scenario exercises.<\/li>\n<\/ul>\n

        3. Enterprise and Integrated Risk Management<\/span><\/h2>\n
          \n
        • Review and enhance the Enterprise Risk Management Framework; maintain the risk universe, taxonomy, and enterprise risk profile.<\/li>\n
        • Coordinate the development of the Risk Appetite Framework, limits, warning indicators, and escalation mechanisms.<\/li>\n
        • Link risk\u2013control\u2013asset\u2013process\u2013service\u2013incident\u2013finding within the GRC platform; develop integrated dashboards and heatmaps to identify concentration risks and emerging risks.<\/li>\n<\/ul>\n

          4. Third-Party Risk and Incident Management<\/span><\/h2>\n
            \n
          • Conduct\/challenge due diligence, periodic assessments, and continuous monitoring of vendors based on their criticality; develop exit strategies and contingency plans.<\/li>\n
          • Establish severity classification and escalation criteria for operational, technology, data, and cybersecurity incidents.<\/li>\n
          • Ensure that incidents are recorded, undergo root cause analysis, have assigned owners and remediation deadlines; analyze trends to identify systemic weaknesses.<\/li>\n<\/ul>\n

            5. Risk Reporting, Risk Data, and Compliance<\/span><\/h2>\n
              \n
            • Develop KRI\/KPI\/KCI metrics, dashboards, and periodic\/ad hoc reports for the CRO, Executive Management, the Risk Committee, and the Board of Directors.<\/li>\n
            • Establish risk data standards covering completeness, accuracy, timeliness, and traceability; coordinate the automation of data collection and alerts.<\/li>\n
            • Translate legal requirements, State Bank of Vietnam (SBV) regulations, and relevant standards into policies, standards, and controls; track remediation actions arising from audits\/inspections.<\/li>\n<\/ul>\n

              6. Advisory, Risk Culture, and Other Duties as Assigned by the Line Manager<\/span><\/h2>\n
                \n
              • Act as a risk advisory partner to business, technology, and operations leaders; conduct evidence-based independent challenge.<\/li>\n
              • Provide training on RCSA, KRI, incident management, Technology Risk, and Operational Resilience; develop a network of risk champions across business units.<\/li>\n<\/ul>\n

                Job Requirements:<\/span><\/h2>\n
                  \n
                • Bachelor’s degree or higher in Risk Management, Finance and Banking, Information Systems, Information Technology, Information Security, Data Science, Auditing, or a related field.<\/li>\n
                • At least 6 years of risk management experience in banking, finance, insurance, securities, payment intermediaries, fintech, Big Four firms, or professional consulting.<\/li>\n
                • At least 6 years of direct professional experience in risk management (technology\/operational\/enterprise\/integrated) within the second line of defense.<\/li>\n
                • In-depth understanding of Operational Risk, Technology Risk, ERM, internal controls, and the Three Lines of Defense model.<\/li>\n
                • Knowledge of the architecture and operations of core banking, digital banking, payment systems, APIs, cloud, data platforms, infrastructure, networks, and enterprise applications.<\/li>\n
                • Strong knowledge of RCSA, KRI\/KCI, control testing, risk acceptance, issue\/loss event management, scenario analysis, and root cause analysis.<\/li>\n
                • Understanding of BCP, DR, operational resilience, impact tolerance, RTO\/RPO, and third-party risk; knowledge of Basel, ISO 31000, COSO ERM, COBIT, NIST CSF, ISO\/IEC 27001, and ISO 22301.<\/li>\n<\/ul>\n

                  Benefits:<\/span><\/strong><\/span><\/h2>\n
                    \n
                  • Competitive salary package (Base salary and performance bonuses).<\/li>\n
                  • Probation period salary is 100% of the official salary.<\/li>\n
                  • Comprehensive health and accident insurance.<\/li>\n
                  • 15 days of annual leave, 3 remote work days per month.<\/li>\n
                  • Provision of work equipment (Macbook\/ Laptop, mouse, monitor, etc.).<\/li>\n
                  • A creative and modern working environment.<\/li>\n<\/ul>\n

                    Working location: <\/span>Galaxy Innovation Hub \u2013 D1 Hi Tech Park, Tang Nhon Phu Ward, HCMC<\/b><\/span><\/p>\n

                    Kindly send your CV to: <\/span>talent@galaxyholdings.co\u00a0<\/b><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

                    Position Overview: Develop, implement, and enhance the organization-wide integrated risk management framework, focusing on technology, operational, enterprise, third-party risks, and operational resilience. Act as a specialist responsible for conducting independent analysis, assessment, and monitoring, providing evidence-based challenge to the first line’s risk assessments and risk acceptance decisions. Independently oversee risks across infrastructure, core banking, digital […]<\/p>\n","protected":false},"template":"","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}}},"class_list":["post-16546","job","type-job","status-publish","hentry","company-galaxy-holdings","field-tech-en","job_type-full-time-en","location-ho-chi-minh"],"acf":[],"_links":{"self":[{"href":"https:\/\/galaxyholdings.co\/en\/wp-json\/wp\/v2\/job\/16546","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/galaxyholdings.co\/en\/wp-json\/wp\/v2\/job"}],"about":[{"href":"https:\/\/galaxyholdings.co\/en\/wp-json\/wp\/v2\/types\/job"}],"wp:attachment":[{"href":"https:\/\/galaxyholdings.co\/en\/wp-json\/wp\/v2\/media?parent=16546"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}