Compliance Manager, Business Operations

Compliance Governance & Framework Own and maintain the Group’s Compliance Management System (CMS) aligned with ISO 37301. Establish policies, procedures, and control standards covering regulatory, ethical, and corporate compliance. Define compliance roles and responsibilities across BUs (three lines of defense). Lead periodic reviews of the CMS maturity and report findings to the Head of L&C and Audit Committee.

Risk Management & Monitoring Maintain a comprehensive Compliance Risk Register and integrate it with Enterprise Risk Management (ERM). Conduct risk assessments, testing, and monitoring of compliance controls. Develop compliance audit programs and coordinate remediation of findings. Ensure 100% of material breaches are escalated within seven (7) days and reported to the Audit Committee.

Policy Management & Regulatory Engagement Oversee development, issuance, and lifecycle management of Group policies and procedures. Ensure timely regulatory filings, renewals, and reporting (≥ 98% on-time). Serve as primary liaison with regulators for compliance matters, inspections, and investigations. Track regulatory developments and translate them into actionable compliance guidance for BUs.

Training, Communication & Culture Design and deliver compliance and ethics training programs for all employees. Promote a “speak-up” culture and ensure protection against retaliation. Lead periodic campaigns on integrity, anti-corruption, data privacy, and AML awareness. Maintain ≥ 95% completion rate for mandatory compliance training.

Experience & Qualifications Education: Law or Compliance degree required. Experience: 10–12+ years in compliance, legal, or risk roles within multinational or regulated industries. Proven track record in implementing compliance frameworks (ISO 37301, SOX, AML/ABC, GDPR). Experience engaging with regulators and managing investigations. Strong written and communication skills in English; Vietnamese preferred.

Core Competencies Compliance Leadership: Builds tone at the top; ensures independence and integrity. Risk-Based Thinking: Anticipates regulatory and ethical risks proactively. Change & Culture Leadership: Drives behavior change through training and communication. Business Judgment: Balances commercial objectives with regulatory expectations. Analytical & Data Orientation: Uses dashboards and analytics for decision-making. Collaboration: Works effectively across Legal, Finance, HR, Security, and BUs. Courage & Judgment: Escalates early, balances business and compliance priorities.

Behavioral Expectations (Aligned with ISO 37301) Demonstrates visible commitment to compliance and integrity. Integrates compliance into planning and decision-making. Provides adequate resources (people, tools, budget). Protects reporters from retaliation and promotes a trust-based culture. Leads with transparency and continuous improvement mindset.