Money Forward Vietnam

Tóm tắt công việc

Why We Are Hiring

We are hiring one Security Specialist to strengthen and grow the Corporate Security & Governance function at MFV. This person will:

• Take over and run the routine corporate security and governance operations currently handled by the Money Forward Japan (MFJ) side, and operate them locally at MFV.
• Gradually build up expertise and, over time, take ownership of security incident handling, focused primarily on MFV.
• Work alongside the existing security members to drive security improvements at MFV, collaborating on security education and training tailored to MFV’s current situation.

About the CISO Office

With the mission “Maximize the value we deliver to customers through security,” the CISO Office defines how security should work across the entire Money Forward group.

Keeping services running and preventing information leaks matter deeply—but they are only part of what we care about. Excessive security controls can slow development and reduce or delay the value we deliver to customers. As security professionals, we constantly weigh risk and design the security that is genuinely optimal for our customers.

Our security principles

• Embedded security in business strategy — Security is never considered in isolation. We design security measures together with the business strategy: the current business phase, cost, expected future revenue scale, and the potential losses if a risk materializes.
• Advanced balancing between security and experience — The strongest possible security is not always the right answer, as it raises cost and can harm usability. We assess risk and choose the optimal measures—sometimes taking on risk to pursue maximum user value—and drive automation to reconcile usability and security at a high level.
• Autonomous and scalable security organization — As the group’s development organization grows, a CISO Office that owns every security function would become a bottleneck. Each development team must be able to build secure services autonomously, and the CISO Office builds the mechanisms and support that make this possible.

What You Will Do

Drawing on your knowledge and experience in information security, coding, and infrastructure, you will maintain and improve Money Forward’s security in close collaboration with the Global IT department and the CISO Office. Your responsibilities include:

• Work closely with and report to the CISO Office in Japan on corporate security and security governance, ensuring effective cross-border collaboration—and, through this, contribute to group-wide (global) security matters.
• Take over routine corporate security and governance operations from the MFJ side and run them locally at MFV.
• Operate and manage security tooling such as EDR, SWG/DLP, and MDM.
• Perform security risk management for internal systems and external SaaS usage.
• Build controls that comply with security guidelines and governance requirements.
• Respond to security incidents for internal systems, progressively taking ownership of incident handling at MFV.
• Plan and drive device security measures.
• Implement and roll out frameworks such as NIST CSF and CIS Benchmarks.
• Gather information on and validate new technologies from major vendors (e.g., Microsoft).
• Collaborate with the existing  to design and deliver security education and training suited to MFV’s situation.

Caring Mental & Physical Recreation: 

• Hybrid working
• Full salary in probation & 13th month salary
• Social insurance on full salary from probation
• Premium Health insurance from probation
• Flexible start 8AM-9AM from Mon-Fri
• 16 days off annually + 1 Birthday Leave 
• Paternity leave extra 5 days 
• Annual company trip; Quarterly team building activities
• Club activities
• Annual health check

Caring Career & Development: 

• Clear Career path
• Foreign language & International technology-related certifications sponsoring
• Well-equipped facility: Macbook pro,  additional monitor,..
• Soft skill workshops
• Tech seminars
• Monthly and biannually Recognition Awards
• Performance review twice/year