Corporate Security Lead (DLP, EDR, Networking)

Mô tả công việc

About Money Forward Money Forward operates a broad portfolio of services used by millions of people, including the personal finance and asset-management app "Money Forward ME" and the business cloud suite "Money Forward Cloud." These services are powered by our own technologies such as account aggregation and the "Money Forward ID" single sign-on. Because most of these services handle users' financial information, they demand an exceptionally high level of security. Money Forward Vietnam (MFV) is the group's development base in Vietnam, building products and platform capabilities for the wider Money Forward group. As MFV grows, we are strengthening the security and governance functions we operate locally. Why We Are Hiring We are hiring one Corporate Security Lead to lead and grow the Corporate Security & Governance function at MFV. This person will: - Belong to the CISO Office team as the dedicated focal point for MFV in Vietnam — working with the CISO team to deploy the group's overall security approach locally, and feeding local context back to strengthen synergy across the group. - Gradually build up expertise and, over time, take ownership of security incident handling, focused primarily on MFV. - Work alongside the existing security members to drive security improvements at MFV, collaborating on security education and training tailored to MFV's current situation. - Lead a small local security team (~2 people), coordinating work assignments and representing the team to upper management and other stakeholders. About the CISO Office With the mission "Maximize the value we deliver to customers through security," the CISO Office defines how security should work across the entire Money Forward group. Keeping services running and preventing information leaks matter deeply—but they are only part of what we care about. Excessive security controls can slow development and reduce or delay the value we deliver to customers. As security professionals, we constantly weigh risk and design the security that is genuinely optimal for our customers. Our security principles - Embedded security in business strategy — Security is never considered in isolation. We design security measures together with the business strategy: the current business phase, cost, expected future revenue scale, and the potential losses if a risk materializes. - Advanced balancing between security and experience — The strongest possible security is not always the right answer, as it raises cost and can harm usability. We assess risk and choose the optimal measures—sometimes taking on risk to pursue maximum user value—and drive automation to reconcile usability and security at a high level. - Autonomous and scalable security organization — As the group's development organization grows, a CISO Office that owns every security function would become a bottleneck. Each development team must be able to build secure services autonomously, and the CISO Office builds the mechanisms and support that make this possible. What You Will Do Drawing on your knowledge and experience in information security, coding, and infrastructure, you will maintain and improve Money Forward's security in close collaboration with the Global IT department and the CISO Office. Your responsibilities include: - Work closely with the CISO Office in Japan on corporate security and security governance, reporting into the CISO Office while coordinating day-to-day with MFV leadership locally — ensuring effective cross-border collaboration and contributing to group-wide (global) security matters. - Partner with the CISO team to deploy the group's overall security approach locally at MFV, while feeding local context back to support synergy across the group. - Operate and manage security tooling such as EDR, SWG/DLP, and MDM. - Perform security risk management for internal systems and external SaaS usage. - Build controls that comply with security guidelines and governance requirements. - Respond to security incidents for internal systems, progressively taking ownership of incident handling at MFV. - Plan and drive device security measures. - Implement and roll out frameworks such as NIST CSF and CIS Benchmarks. - Gather information on and validate new technologies from major vendors (e.g., Microsoft). - Collaborate with the existing team to design and deliver security education and training suited to MFV's situation. - Lead and coordinate the local security team's work assignments, balancing priorities across ongoing operations, incidents, and stakeholder requests. - Act as the primary point of coordination between the local team and upper management/other stakeholders, translating business priorities into team assignments and communicating progress back.

Yêu cầu công việc

Required Skills & Experience - Solid foundational understanding of computer science, including networking, operating systems, data structures, and cryptography.Development experience in at least one programming language. - Hands-on experience building and operating internal systems (e.g., MDM, EDR, Entra ID). - Experience building and operating security appliances (Firewall, IDS/IPS, etc.) and network equipment. - Business-level English for professional communication with the Japan-based team and for documentation. - Proven experience in leadership or management. This can be light-touch — e.g., managing a team of ~2 at roughly 10–20% of overall time allocation is acceptable; full-time people-management experience is not required. - Demonstrated leadership ability in problem-solving and decision-making, including under ambiguity or incomplete information. - Ability to coordinate work assignments with existing team members while engaging upper management and other stakeholders. Preferred Skills & Experience - Security certifications such as CISSP, CISM, OSCP, or GCIH. - Deep understanding of authentication and authorization, OIDC, and OAuth. - Experience with security-related work in the finance / fintech industry (e.g., FISC and similar standards). - Experience developing AI, or developing with the help of AI tools. (As shared in Money Forward AI Vision 2025, Money Forward is actively using AI to improve operational efficiency and expects to introduce AI agents across all products in the future.)

Quyền lợi

13th month salary. , Social Insurance applied from the probation period on 100% salary. Private health insurance and accident insurance; from Managing level, extra coverage is provided for family members. Annual health check. , 16–24 paid days off and more. Extra 5 days of paternity leave. , Sponsorship for foreign-language and international technology-related certifications. External and internal training courses. Soft-skill workshops. Tech seminars. , Monthly and biannual Recognition Awards. , Well-equipped facility, including a MacBook Pro and additional monitor. , Annual company trip. , Quarterly team-building activities. Billiards and Running clubs. , Hybrid working: 2 days at the office and 3 days WFH. Full salary during the probation period. Clear career path. Performance and salary review twice a year, in June

Kỹ năng từ nguồn