Corporate Security Lead, DLP and EDR at Money Forward Vietnam

Role overview

This role represents Money Forward Vietnam within the group CISO Office and leads a small local security team. It combines corporate security operations, governance, risk decisions and coordination with Japan.

Responsibilities

• Operate and improve endpoint, data-loss prevention, web-security and device-management controls including EDR, SWG/DLP and MDM.
• Assess internal systems and SaaS risks; apply security governance and frameworks such as NIST CSF and CIS Benchmarks.
• Respond to internal security incidents and progressively own the local response process.
• Coordinate with the CISO Office in Japan, MFV leaders and Global IT; set local team priorities and report progress.
• Deliver practical security education and evaluate new security technologies for the Vietnam development organization.

Qualifications

• Computer-science foundation covering networks, operating systems, data structures and cryptography, plus development experience in a programming language.
• Hands-on operation of internal security systems such as MDM, EDR or Entra ID and network controls such as firewalls or IDS/IPS.
• Business-level English for collaboration with Japan and written security documentation.
• Experience leading a small team or coordinating security work and making decisions under uncertainty.
• CISSP, CISM, OSCP or GCIH, fintech security experience and OAuth/OIDC knowledge are additional advantages.

Technology in this role

• Java: [HCM] AI Product Builder (Java, .
• Kotlin: Principal Java/Kotlin Engineer (Banking .
• Golang: [Hanoi] Principal Engineer .
• Ruby on Rails: Principal Software Engineer (Ruby on Rails, .
• Ruby: Principal Software Engineer (Ruby on Rails, .
• AWS: [Hanoi] Senior Platform SRE (DevOps, .
• CAN: Excessive security controls can slow development and reduce or delay the value we deliver to .
• Rails: Principal Software Engineer (Ruby on Rails, .
• OAuth: CISSP, CISM, OSCP or GCIH, fintech security experience and OAuth/OIDC knowledge are additional .
• OIDC: CISSP, CISM, OSCP or GCIH, fintech security experience and OAuth/OIDC knowledge are additional .

Role-specific candidate guide

Preparation notes based on the employer’s stated responsibilities and qualifications.

Understanding the scope. This Corporate Security Lead (DLP, EDR, Networking) position at Money Forward Vietnam is best assessed through the work described in the employer’s posting, rather than the title alone. The available role overview says: “This role represents Money Forward Vietnam within the group CISO Office and leads a small local security team. It combines corporate security operations, governance, risk decisions and coordination with Japan.” Read that statement together with the responsibilities below to understand the likely balance between delivery, coordination and technical decision-making. The role belongs to the security area, but that label is only a guide to the work; the employer’s own requirements remain decisive. Before applying, check the original listing for reporting lines, product or team assignment, employment terms and any details that may have changed since this copy was checked. Where this page says a fact is not specified, treat it as an open question rather than an implied promise.

What the responsibilities signal. The posting specifically names “Operate and improve endpoint, data-loss prevention, web-security and device-management controls including EDR, SWG/DLP and MDM.”; “Assess internal systems and SaaS risks; apply security governance and frameworks such as NIST CSF and CIS Benchmarks.”; “Respond to internal security incidents and progressively own the local response process.”. For each duty, identify a project where you performed comparable work and be ready to describe the context, your own contribution, constraints, decisions, and measurable result. Explain how you moved from the initial need to implementation, review, release or operational follow-through, where those stages apply. If the work involved other teams or users, distinguish your decisions from the group’s contribution. Avoid presenting a technology keyword as proof by itself: connect it to the problem you solved, the scale or complexity involved, and what changed after your work. The source may contain additional duties; review it directly before preparing your application.

How to read the requirements. The listed qualifications include “Computer-science foundation covering networks, operating systems, data structures and cryptography, plus development experience in a programming language.”; “Hands-on operation of internal security systems such as MDM, EDR or Entra ID and network controls such as firewalls or IDS/IPS.”; “Business-level English for collaboration with Japan and written security documentation.”. Mark each requirement as demonstrated, adjacent experience or a genuine gap, then use a concise example for the first two categories. A strong example explains what you personally owned, how you made trade-offs, how you validated the result and what you learned. If the posting specifies years of experience, language ability, certifications, location or eligibility, address those facts plainly in your CV or application rather than relying on the employer to infer them. Do not claim a qualification from exposure alone. For a requirement you do not meet, describe relevant transferable experience accurately and ask the recruiter whether it is mandatory.

Technology and working evidence. The technology terms associated with this listing are Java: [HCM].

Benefits

• Hybrid schedule of two office days and three home-working days, with a flexible weekday start between 8 and 9 a.m.
• Full pay during probation; statutory and private health and accident insurance; a 13th-month salary and 16–24 paid days off.
• Training and certification support, twice-yearly reviews, health checks, company activities and work equipment.

About Money Forward Vietnam

Money Forward Vietnam develops products and platform capabilities for a financial-software group whose services handle customer financial information.

Related jobs

• Lead Security Engineer, Red Team and Threat Intelligence at Grab — Grab
• Security Solutions Engineer at OpenRouter — OpenRouter
• Security Engineer at Deepgram — Deepgram
• Senior Security Engineer, Offensive Security at Docker — Docker
• Staff Security Governance Engineer at GitLab — GitLab
• Principal Security Engineer, Product & Infrastructure at Pigment — Pigment