Security Specialist

About Money Forward

Money Forward operates a broad portfolio of services used by millions of people, including the personal finance and asset-management app “Money Forward ME” and the business cloud suite “Money Forward Cloud.” These services are powered by our own technologies such as account aggregation and the “Money Forward ID” single sign-on. Because most of these services handle users’ financial information, they demand an exceptionally high level of security.

Money Forward Vietnam (MFV) is the group’s development base in Vietnam, building products and platform capabilities for the wider Money Forward group. As MFV grows, we are strengthening the security and governance functions we operate locally.

Why We Are Hiring

We are hiring one Security Specialist to strengthen and grow the Corporate Security & Governance function at MFV. This person will:

• Take over and run the routine corporate security and governance operations currently handled by the Money Forward Japan (MFJ) side, and operate them locally at MFV.
• Gradually build up expertise and, over time, take ownership of security incident handling, focused primarily on MFV.
• Work alongside the existing security members to drive security improvements at MFV, collaborating on security education and training tailored to MFV’s current situation.

About the CISO Office

With the mission “Maximize the value we deliver to customers through security,” the CISO Office defines how security should work across the entire Money Forward group.

Keeping services running and preventing information leaks matter deeply—but they are only part of what we care about. Excessive security controls can slow development and reduce or delay the value we deliver to customers. As security professionals, we constantly weigh risk and design the security that is genuinely optimal for our customers.

Our security principles

• Embedded security in business strategy — Security is never considered in isolation. We design security measures together with the business strategy: the current business phase, cost, expected future revenue scale, and the potential losses if a risk materializes.
• Advanced balancing between security and experience — The strongest possible security is not always the right answer, as it raises cost and can harm usability. We assess risk and choose the optimal measures—sometimes taking on risk to pursue maximum user value—and drive automation to reconcile usability and security at a high level.
• Autonomous and scalable security organization — As the group’s development organization grows, a CISO Office that owns every security function would become a bottleneck. Each development team must be able to build secure services autonomously, and the CISO Office builds the mechanisms and support that make this possible.

What You Will Do

Drawing on your knowledge and experience in information security, coding, and infrastructure, you will maintain and improve Money Forward’s security in close collaboration with the Global IT department and the CISO Office. Your responsibilities include:

• Work closely with and report to the CISO Office in Japan on corporate security and security governance, ensuring effective cross-border collaboration—and, through this, contribute to group-wide (global) security matters.
• Take over routine corporate security and governance operations from the MFJ side and run them locally at MFV.
• Operate and manage security tooling such as EDR, SWG/DLP, and MDM.
• Perform security risk management for internal systems and external SaaS usage.
• Build controls that comply with security guidelines and governance requirements.
• Respond to security incidents for internal systems, progressively taking ownership of incident handling at MFV.
• Plan and drive device security measures.
• Implement and roll out frameworks such as NIST CSF and CIS Benchmarks.
• Gather information on and validate new technologies from major vendors (e.g., Microsoft).
• Collaborate with the existing  to design and deliver security education and training suited to MFV’s situation.

Required Skills & Experience

• Solid foundational understanding of computer science, including networking, operating systems, data structures, and cryptography.
• Development experience in at least one programming language.
• Hands-on experience building and operating internal systems (e.g., MDM, EDR, Entra ID).
• Experience building and operating security appliances (Firewall, IDS/IPS, etc.) and network equipment.
• Business-level English for professional communication with the Japan-based team and for documentation.

Preferred Skills & Experience

• Security certifications such as CISSP, CISM, OSCP, or GCIH.
• Deep understanding of authentication and authorization, OIDC, and OAuth.
• Experience with security-related work in the finance / fintech industry (e.g., FISC and similar standards).
• Experience developing AI, or developing with the help of AI tools. (As shared in Money Forward AI Vision 2025, Money Forward is actively using AI to improve operational efficiency and expects to introduce AI agents across all products in the future.)