About The Role

1. This position is primarily dedicated to supporting one of Elfie’s key insurance clients and making sure security, privacy and compliance requirements are properly managed throughout project delivery.

2. You’ll work closely with the client, Product, Engineering and other internal teams to identify requirements, assess risks, coordinate security testing, prepare evidence and support project sign-off. Alongside this client-focused work, you’ll also support Elfie’s ongoing business-as-usual security and compliance activities when needed.

3. Our clients trust Elfie to deliver secure, compliant and reliable health solutions. This role helps us maintain that trust by making security and compliance part of project delivery from the beginning, not something checked only before launch.

4. Your main focus will be supporting our insurance client, while also helping Elfie maintain its wider security, privacy and compliance program globally

What You'll Do

Technology Governance, Risk & Compliance (GRC)

• Lead security and compliance activities for assigned client projects.

• Turn client, contractual and regulatory requirements into clear actions for internal teams.

• Run project security assessments and agree on the controls and evidence needed.

• Track risks, findings and actions until they’re closed or formally accepted.

• Prepare evidence and support client reviews, audits and security questionnaires.

• Help keep Elfie’s policies, controls, risk registers and compliance evidence up to date.

• Support ISO 27001, SOC 2 and other ongoing compliance activities.

• Provide clear updates on risks, gaps and progress to clients and internal stakeholders.

Data Privacy

• Review how projects collect, use, store, share and delete personal and health data.

• Help teams build privacy requirements into products, features and integrations.

• Support privacy impact assessments, data-flow reviews and retention decisions.

• Help resolve privacy questions raised by clients, users or internal teams.

• Support Elfie’s ongoing privacy activities, including consent, data requests and policy updates.

Security Operations & Resilience

• Review project architecture, cloud environments, applications, APIs and access controls.

• Check that security is built into the CI/CD pipeline, including code scanning, dependency checks, secrets management and security gates.

• Coordinate pentests, vulnerability scans and other security testing.

• Work with Engineering and IT to prioritize and close security findings.

• Review logging, monitoring, incident response, backup and recovery arrangements.

• Support security incidents and follow up on corrective actions.

• Help with Elfie’s ongoing vulnerability management, access reviews and security monitoring.

What You'll Need

• Around 4–6 years of experience in security, compliance, privacy or technology risk.

• Experience supporting client-facing technology projects as well as ongoing security and compliance work.

• Comfortable working directly with clients, auditors, Product, Engineering and other stakeholders.

• Able to turn security, contractual and regulatory requirements into practical actions.

• Experience with risk assessments, audits, evidence collection, pentests and remediation.

• Good understanding of cloud security, applications, APIs, access controls and data protection.

• Familiar with secure CI/CD pipelines, code scanning, dependency checks and secrets management.

• Good knowledge of ISO 27001, SOC 2, GDPR and similar requirements.

• Strong written and spoken English for client meetings, reports and documentation.

• Organised and comfortable managing client deadlines alongside BAU responsibilities.

• Certifications are welcome, but practical experience and ownership matter more.

Interview process:

1. Online HR Round: company introduction & experience discovery

2. Online Hiring Manager: with Compliance Manager

3. Offline Hiring Manager: with Head of Technology

Benefits

• 💰 Competitive Salary: We offer a salary that’s competitive with the market.

• 📄 Flexible Contract Options: We offer both local and international contract options, so you can choose what works best for you. You can also receive your salary in USD or VND.

• 🌱 Growth Opportunities: There’s plenty of room to grow if you want to go beyond your core focus and sharpen your skills.

• 💻 Tech Setup: You’ll get a MacBook Air or MacBook Pro, plus a monitor for work.

• 🩺 Premium Insurance: We provide premium insurance coverage for you and 1 loved one, so you can feel supported in and outside work.

• 🎯 Bonus Scheme: We offer a quarterly performance bonus of up to 150% of your compensation.

• 🤝 Team Bonding Allowance: You’ll get 800,000 VND per quarter for team bonding activities.

• 🌴 Paid Time Off & Public Holidays: You’ll get 14 days of annual leave, and we fully observe national public holidays.

• 🏠 Hybrid Working: Work from home on Tuesdays and Wednesdays.

• 🍛 Meals & Refreshments: We provide free lunch and dinner.

About Elfie

Elfie is the world’s #1 100% free digital health ecosystem, bringing together connected experiences for patients, healthcare professionals and healthcare organisations. Through the Elfie app, WhatsApp experiences, ElfieCare clinician tools and AI-powered health coaching, Elfie helps people take better care of their health in a simple, engaging and motivating way.

By combining gamification, AI and evidence-based health programmes, Elfie empowers people to build healthier habits while enabling healthcare professionals to better support their communities.

Backed by peer-reviewed medical publications and trusted by life sciences and insurance partners, the Elfie ecosystem drives meaningful patient engagement, improves adherence and generates valuable real-world insights, helping organisations achieve better health outcomes at scale.

Stay Elfie...