Senior Data & AI Compliance

***Work Location:***

***Hanoi***

**Job overview**

VinSmart Future is seeking a Senior Data & AI Compliance Specialist (Technical focus) for the Data Control & Sharing division, reporting directly to the Director of Data Control & Sharing and working closely with the Data Protection Officer (DPO). The division governs how data is managed, protected, and shared across Vingroup's business verticals (PnLs), and this role anchors the technical side of VSF's compliance with Vietnam's Law on Personal Data Protection (Law No. 91/2025/QH15), the Law on Data (Law No. 60/2024/QH15), and the Law on Artificial Intelligence (Law No. 134/2025/QH15, effective 1 March 2026), together with their guiding decrees and circulars.

You will turn legal requirements into verifiable technical controls and evidence: reviewing system architecture, data flows, and AI system designs, assessing privacy and AI risk, and working with Security, Data Engineering, AI/ML teams, and the DPO. This is a technical assurance role, not a development role. Deep legal knowledge is not required, because the Legal-focus specialist handles legal interpretation and contracts, but genuine interest in law and regulation is important. The role is one of two complementary positions in the team (Legal focus and Technical focus), and candidates are assessed for the focus they apply to.

**Key Responsibilities**

• Support the DPO on

**DPIAs, cross-border data transfers, personal data breaches**

, and maintain required technical records, including data flows, system inventories, and processing records.

• Review product and platform architecture against

**Vietnamese data protection and data regulations**

, covering data minimization, retention, access control, encryption, logging, and de-identification.

• Assess technical controls for

**data subject rights, consent management, breach detection, and incident response**

.

• Establish and maintain an inventory of

**AI systems and features**

, including third-party and Generative AI, and support risk classification under applicable AI regulations.

• Review AI lifecycle controls covering

**data governance, model documentation and evaluation, bias and robustness, human oversight, traceability, AI security, and transparency requirements**

.

• Support

**AI incident management, high-risk AI conformity assessments, and regulatory inquiries**

, including preparation of technical evidence.

• Conduct technical due diligence on

**cloud, SDK, AI, and technology vendors**

, including security posture, data location, sub-processors, and data/model handling.

• Partner with

**Legal, Security, Data, AI/ML, Engineering, and business teams**

to embed Privacy-by-Design and AI governance into software development and ML lifecycles.

**Qualifications**

• Bachelor’s degree in

**Computer Science, IT, Data Science, Cybersecurity**

, or a related technical field.

• **4+ years of relevant experience**

in cybersecurity, data security, data engineering, AI/ML, IT risk, technology audit, or technology compliance.

• Strong understanding of

**data architecture and lifecycle, cloud environments, access control, encryption, de-identification, logging, monitoring, and incident response**

.

• Practical understanding of

**AI/ML systems**

, including data pipelines, model training and evaluation, deployment, LLMs and Generative AI, as well as key AI risks such as bias, hallucination, prompt injection, data leakage, and re-identification.

• Working knowledge of

**Vietnamese personal data protection and AI regulations**

, or demonstrated ability to quickly interpret and apply regulatory requirements to technology controls.

• Ability to translate regulatory requirements into

**practical controls, assessment criteria, and technical evidence**

for Engineering and business teams.

• Strong analytical, documentation, and stakeholder management skills.
• Good command of

**Vietnamese and English**

.

**Preferred Skills:**

• Experience working with legal or compliance teams, or exposure to privacy and regulatory compliance, is preferable.
• Interest in law and regulation is a plus, including completed training in personal data protection or AI governance (e.g., CIPT, CIPM, AIGP, or equivalent).
• Certification in security, privacy, or AI management (e.g., ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 42001, CISSP, CISA, CISM, or equivalent).
• Familiarity with AI risk and security frameworks (e.g., NIST AI RMF, OWASP Top 10 for LLM Applications) and hands-on exposure to privacy-enhancing technologies, data catalog and lineage tools, or AI testing tools (bias, robustness, red-teaming) is a plus.
• Experience at a bank, financial institution, technology company, or consulting firm working on large-scale data or AI platforms.

**📩 Apply via:**

Mail:

[email protected]

For more information, please contact the Talent Acquisition Department – VinSmartFuture.