GRC Transformation Program Manager

Job Purpose

• The job holder leads the end-to-end delivery of Techcombank Group’s enterprise Governance, Risk & Compliance (GRC) platform implementation - a group-wide programme to replace fragmented, spreadsheet-based risk management with a single, integrated system of record across all eleven non-financial risk categories.

• The job holder plans, coordinates and governs the programme across multiple entities and vendors, blending traditional (Waterfall) delivery discipline with Agile ways of working. Crucially, this role bridges project management rigour with deep understanding of banking operations and operational risk management - ensuring the platform genuinely reflects how the Bank and its subsidiaries identify, assess, control and report risk, and that it meets the fixed regulatory obligations (SBV Circular 83/2025, Basel operational-risk and third-party principles) on time.

• The job holder collaborates with cross-functional teams across the three lines of defence - business units, Risk, Compliance, Internal Audit, Technology and the implementation partner (ServiceNow / DXC) - to track and govern progress, manage resources, manage stakeholders, and deliver measurable outcomes: reduced operational losses, regulatory readiness, and timely, informed decision-making for senior management and the Board.

Key Accountabilities (1)

Programme Planning, Delivery & Governance

• Own the end-to-end delivery plan for the GRC platform across all phases - Discover, Design, Select, Build, Deploy and Sustain - across the Bank and its subsidiaries.

• Design and maintain the programme operating rhythm, governance model, RACI, delivery milestones and stage-gates; run an effective cadence of working groups, design authority and steering forums.

• Blend Waterfall and Agile delivery approaches appropriately for a large, complex, mission-critical, enterprise-level programme.

• Consolidate and prepare accurate, timely progress reporting for SteerCo, TECO, BOM and BOD-level committees, including the CRO and Board Risk Committee.

• Manage the implementation partner and technology vendors against scope, SLA, quality and commercial terms.

Key Accountabilities (2)

Banking Operations & Operational Risk Alignment

• Ensure the platform design faithfully reflects real banking operations and the Group’s operational-risk framework - RCSA, risk taxonomy, control library, incident & loss-event management, KRIs, third-party risk and business continuity.

• Translate operational-risk and banking-operations requirements into clear, testable delivery requirements, and challenge design decisions that would not work in a live banking environment.

• Coordinate closely with process, control and risk owners across the business to validate process inventories, control mappings and data before migration onto the platform.

• Ensure delivery meets fixed regulatory obligations (SBV Circular 83/2025, Basel operational resilience & third-party principles) and can produce examiner-ready, auditable evidence.

Key Accountabilities (3)

Resource, Risk & Stakeholder Management

• Identify high-level resource requirements with business units and divisions; track and control resource usage to ensure sufficiency within the approved plan and budget.

• Proactively identify, track and escalate programme risks, issues and dependencies; maintain the risk/issue register and support an Early Warning System (EWS) for the programme.

• Guide initiative teams, business units and divisions for effective cross-functional collaboration across five entities and multiple systems.

• Control the quality and compliance of programme deliverables against required standards; govern go/no-go readiness through the Steering Committee.

• Lead change management and adoption across entities - training, communication and named change champions per entity per sprint - to secure benefit realisation.

Direct Manager

Initiative Director / Programme Sponsor (CRO Office)

Direct Report(s)

Programme workstream leads and PMO support (as assigned)

Success Profile - Qualifications and Experiences

• At least 5 years of project or programme management experience delivering large, complex initiatives using Waterfall and/or Agile methodologies.

• Proven experience in Banking Operations - hands-on understanding of core banking, payments, or operational processes and how they run day-to-day.

• Proven experience in Banking Operational Risk Management - e.g., RCSA, risk & control frameworks, incident/loss-event management, KRIs, third-party/vendor risk, or operational resilience.

• Track record delivering enterprise platform/system implementations in a bank or financial institution (GRC / IRM / risk/compliance systems strongly preferred).

• Strong stakeholder management and reporting experience, including operating rhythm of executive and Board-level performance reviews.

• Bachelor’s or Master’s degree in Banking & Finance, Risk Management, Business, Technology or a related discipline.

Strong verbal and written communication (Vietnamese & English)

Big advantage if you have:

• Project/programme management certification - PMP, PgMP, PRINCE2 or equivalent.

• Direct experience implementing or administering a GRC/IRM platform (ServiceNow IRM, MetricStream, Archer or similar).

• Familiarity with SBV regulations on operational risk/information security, and Basel operational-risk, resilience, and third-party principles.

• Experience delivering across a multi-entity group (securities, insurance, asset management) and coordinating multiple vendors.

• Exposure to AI-assisted or data-driven risk workflows and platform data migration/integration.