Tóm tắt công việc
About Money Forward
Money Forward operates a broad portfolio of services used by millions of people, including the personal finance and asset-management app “Money Forward ME” and the business cloud suite “Money Forward Cloud.” These services are powered by our own technologies such as account aggregation and the “Money Forward ID” single sign-on. Because most of these services handle users’ financial information, they demand an exceptionally high level of security.
Money Forward Vietnam (MFV) is the group’s development base in Vietnam, building products and platform capabilities for the wider Money Forward group. As MFV grows, we are strengthening the security and governance functions we operate locally.
This role expects a strong security mindset, with a clear understanding of data privacy, credential protection, device security, and the responsible use of corporate systems, tools, and accounts.
Why We Are Hiring
We are hiring one Security Specialist to strengthen and grow the Corporate Security & Governance function at MFV. This person will:
- Take over and run the routine corporate security and governance operations currently handled by the Money Forward Japan (MFJ) side, and operate them locally at MFV.
- Gradually build up expertise and, over time, take ownership of security incident handling, focused primarily on MFV.
- Work alongside the existing security members to drive security improvements at MFV, collaborating on security education and training tailored to MFV’s current situation.
About the CISO Office
With the mission “Maximize the value we deliver to customers through security,” the CISO Office defines how security should work across the entire Money Forward group.
Keeping services running and preventing information leaks matter deeply—but they are only part of what we care about. Excessive security controls can slow development and reduce or delay the value we deliver to customers. As security professionals, we constantly weigh risk and design the security that is genuinely optimal for our customers.
Our security principles
- Embedded security in business strategy — Security is never considered in isolation. We design security measures together with the business strategy: the current business phase, cost, expected future revenue scale, and the potential losses if a risk materializes.
- Advanced balancing between security and experience — The strongest possible security is not always the right answer, as it raises cost and can harm usability. We assess risk and choose the optimal measures—sometimes taking on risk to pursue maximum user value—and drive automation to reconcile usability and security at a high level.
- Autonomous and scalable security organization — As the group’s development organization grows, a CISO Office that owns every security function would become a bottleneck. Each development team must be able to build secure services autonomously, and the CISO Office builds the mechanisms and support that make this possible.
What You Will Do
Drawing on your knowledge and experience in information security, coding, and infrastructure, you will maintain and improve Money Forward’s security in close collaboration with the Global IT department and the CISO Office. Your responsibilities include:
- Work closely with and report to the CISO Office in Japan on corporate security and security governance, ensuring effective cross-border collaboration—and, through this, contribute to group-wide (global) security matters.
- Take over routine corporate security and governance operations from the MFJ side and run them locally at MFV.
- Operate and manage security tooling such as EDR, SWG/DLP, and MDM.
- Perform security risk management for internal systems and external SaaS usage.
- Build controls that comply with security guidelines and governance requirements.
- Respond to security incidents for internal systems, progressively taking ownership of incident handling at MFV.
- Plan and drive device security measures.
- Implement and roll out frameworks such as NIST CSF and CIS Benchmarks.
- Gather information on and validate new technologies from major vendors (e.g., Microsoft).
- Collaborate with the existing to design and deliver security education and training suited to MFV’s situation.
Caring Mental & Physical Recreation:
- Hybrid working
- Full salary in probation & 13th month salary
- Social insurance on full salary from probation
- Premium Health insurance from probation
- Flexible start 8AM-9AM from Mon-Fri
- 16 days off annually + 1 Birthday Leave
- Paternity leave extra 5 days
- Annual company trip; Quarterly team building activities
- Club activities
- Annual health check
Caring Career & Development:
- Clear Career path
- Foreign language & International technology-related certifications sponsoring
- Well-equipped facility: Macbook pro, additional monitor,..
- Soft skill workshops
- Tech seminars
- Monthly and biannually Recognition Awards
- Performance review twice/year
