Senior Security & Compliance Specialist

Senior Security & Compliance Specialist Apply We usually respond within three days About The Role This role mainly supports 1 of Elfie’s key insurance clients, making sure security, privacy, and compliance are managed throughout delivery. You’ll work with the client, Product, Engineering, and internal teams to define requirements, assess risk, coordinate testing, prepare evidence, and support sign-off. You’ll also help with Elfie’s day-to-day security and compliance work when needed. Clients trust Elfie to deliver secure, compliant, reliable health solutions. This role helps us earn that trust from the start of delivery, not just before launch. Your main focus will be supporting our insurance client while helping strengthen Elfie’s global security, privacy, and compliance program. What Challenges You'll face You’ll balance the priorities of a key insurance client with Elfie’s BAU security and compliance needs. Client requirements may change or arrive late in the project. You may manage several assessments, audits and remediation activities at the same time. You’ll need to influence teams without directly managing them. You’ll need enough technical knowledge to challenge designs while keeping your advice practical. What You'll Do Technology Governance, Risk & Compliance (GRC) Lead security and compliance activities for assigned client projects. Turn client, contractual and regulatory requirements into clear actions for internal teams. Run project security assessments and agree on the controls and evidence needed. Track risks, findings and actions until they’re closed or formally accepted. Prepare evidence and support client reviews, audits and security questionnaires. Help keep Elfie’s policies, controls, risk registers and compliance evidence up to date. Support ISO 27001, SOC 2 and other ongoing compliance activities. Provide clear updates on risks, gaps and progress to clients and internal stakeholders. Data Privacy Review how projects collect, use, store, share and delete personal and health data. Help teams build privacy requirements into products, features and integrations. Support privacy impact assessments, data-flow reviews and retention decisions. Help resolve privacy questions raised by clients, users or internal teams. Support Elfie’s ongoing privacy activities, including consent, data requests and policy updates. Security Operations & Resilience Review project architecture, cloud environments, applications, APIs and access controls. Check that security is built into the CI/CD pipeline, including code scanning, dependency checks, secrets management and security gates. Coordinate pentests, vulnerability scans and other security testing. Work with Engineering and IT to prioritize and close security findings. Review logging, monitoring, incident response, backup and recovery arrangements. Support security incidents and follow up on corrective actions. Help with Elfie’s ongoing vulnerability management, access reviews and security monitoring. What You'll Need Around 4–6 years of experience in security, compliance, privacy or technology risk. Experience supporting client-facing technology projects as well as ongoing security and compliance work. Comfortable working directly with clients, auditors, Product, Engineering and other stakeholders. Able to turn security, contractual and regulatory requirements into practical actions. Experience with risk assessments, audits, evidence collection, pentests and remediation. Good understanding of cloud security, applications, APIs, access controls and data protection. Familiar with secure CI/CD pipelines, code scanning, dependency checks and secrets management. Good knowledge of ISO 27001, SOC 2, GDPR and similar requirements. Strong written and spoken English for client meetings, reports and documentation. Organised and comfortable managing client deadlines alongside BAU responsibilities. Certifications are welcome, but practical experience and ownership matter more. Interview process: Online HR Round: company introduction & experience discovery Online Hiring Manager: with Compliance Manager Offline Hiring Manager: with Head of Technology Benefits 💰 Competitive Salary : We offer a salary that’s competitive with the market. 📄 Flexible Contract Options : We offer both local and international contract options, so you can choose what works best for you. You can also receive your salary in USD or VND. 🌱 Growth Opportunities : There’s plenty of room to grow if you want to go beyond your core focus and sharpen your skills. 💻 Tech Setup : You’ll get a MacBook Air or MacBook Pro, plus a monitor for work. 🩺 Premium Insurance : We provide premium insurance coverage for you and 1 loved one, so you can feel supported in and outside work. 🎯 Bonus Scheme : We offer a quarterly performance bonus of up to 150% of your compensation. 🤝 Team Bonding Allowance : You’ll get 800,000 VND per quarter for team bonding activities. 🌴 Paid Time Off & Public Holidays : You’ll get 14 days of annual leave, and we fully observe national public holidays. 🏠 Hybrid Working : Work from home on Wednesdays and Fridays 🍛 Meals & Refreshments : We provide free lunch and dinner. About Elfie Elfie is the world’s #1 100% free digital health ecosystem, bringing together connected experiences for patients, healthcare professionals and healthcare organisations. Through the Elfie app, WhatsApp experiences, ElfieCare clinician tools and AI-powered health coaching, Elfie helps people take better care of their health in a simple, engaging and motivating way. By combining gamification, AI and evidence-based health programmes, Elfie empowers people to build healthier habits while enabling healthcare professionals to better support their communities. Backed by peer-reviewed medical publications and trusted by life sciences and insurance partners, the Elfie ecosystem drives meaningful patient engagement, improves adherence and generates valuable real-world insights, helping organisations achieve better health outcomes at scale. Stay Elfie... Department [SP] Software & Platforms (Data, QA) Locations Ho Chi Minh City Remote status Hybrid