• Card System Operations & Monitoring: Manage day-to-day operations of the CMS, authorization engine, clearing & settlement processing; monitor 24/7 transaction health across ATM, POS, e-commerce, and mobile channels; operate NAPAS host connectivity; execute daily/weekly/monthly batch operations (settlement runs, reconciliation, fee posting, statement generation).
• Incident Management & Troubleshooting (L2): Act as Level 2 escalation for all card incidents — authorization failures, settlement discrepancies, batch errors, connectivity outages; diagnose using ISO 8583 log analysis; manage P1/P2 incidents end-to-end including PIR and root-cause analysis; coordinate resolution with CMS vendor, NAPAS, CBS vendor, and HSM provider.
• NAPAS & Scheme Operations: Manage NAPAS connectivity tests, key exchanges, and certification activities; process NAPAS clearing and settlement files; handle disputes and chargebacks within scheme deadlines; implement Visa/Mastercard operational requirements (BIN table updates, EMV parameters, 3DS configuration, scheme bulletin changes).
• HSM & Cryptographic Key Management: Operate HSMs for PIN encryption, MAC generation, and card personalization; execute full key lifecycle (generation, dual-control key ceremony, injection, exchange with NAPAS/schemes, rotation, destruction); maintain ZMK/PEK/ZPK/CVK key inventory; ensure PCI HSM compliance and complete audit trail.
• PCI DSS & Security Operations: Maintain all PCI DSS controls in the CDE (network segmentation, access control, encryption, logging/monitoring); manage access reviews and privileged access; operate SIEM for card-specific security events; support quarterly VA scans and annual penetration testing; coordinate QSA audit evidence preparation and remediation.
• System Changes, Releases & Card Project Implementation: Manage change control for all card system modifications; implement CMS parameter changes (product config, fee structures, billing cycle, EPP); execute NAPAS/scheme updates; coordinate SIT and regression testing; maintain non-production environments with PCI-compliant test data management. Additionally, participate actively in card system implementation projects — work alongside the PMO to track technical workstream progress, represent IT in project meetings, review and validate system design documents (CMS architecture, host connectivity specs, integration design), coordinate UAT scheduling and technical readiness, support NAPAS certification test execution, assist in go-live cutover planning and production deployment, and ensure all technical runbooks and operational handover documents are completed before go-live sign-off.
• Card Operations L2 Support, Reporting & Project Coordination: Provide technical support to Card Operations, Fraud, and Finance teams; produce operational reports (transaction dashboards, SLA availability reports, batch completion, error rate trends); maintain and update all system runbooks, operational procedures, and troubleshooting guides. During implementation projects: act as the IT technical representative in project governance meetings; provide input to the PMO on technical task status, dependencies, and blockers; prepare and submit technical deliverables required by the project plan (integration test results, NAPAS certification evidence, UAT sign-off reports, go-live readiness checklist items, post-go-live hypercare incident logs); coordinate technical workstreams with vendors (CMS vendor, NAPAS, CBS vendor, HSM provider) to meet project milestones.

Bằng cấp / Education

• Bachelor's degree or above in Computer Science, Information Technology, Information Systems, Electrical Engineering, or a related technical field. Master's degree in IT, Cybersecurity, or Finance & Banking is an advantage.

Kinh nghiệm / Experience

• Minimum 5 years of hands-on IT experience in card payment systems at a bank, finance company, card processor, or payment institution
• Minimum 3 years operating a live Card Management System (CMS) in production
• Proven hands-on experience across all card operation domains:

• • Card Management System (CMS): card product setup, card lifecycle management, credit parameter configuration, billing engine, fee engine, statement processing

• • • Issuance, activation, replacement, cancellation, renewal

• • Authorization & Switching: real-time authorization processing, stand-in processing, velocity controls, fraud rules engine
  • Clearing & Settlement: file generation, net settlement calculation, T+1 clearing, GL reconciliation, dispute file management
  • Card Lifecycle Management: end-to-end issuance workflow, embossing, PIN generation/mailer, card bureau integration, activation, replacement, cancellation, and renewal
  • Dispute Management: chargeback workflow, retrieval request, re-presentment, reason codes, scheme SLA tracking (NAPAS, Visa, Mastercard)
  • Revolving Credit Operations: billing cycle, interest calculation, EPP/instalment plans, minimum payment, grace period, cash advance
• Direct experience managing NAPAS host connectivity and clearing/settlement operations
• Experience executing HSM key management: key ceremony, ZMK/PEK/ZPK key exchange
• Hands-on PCI DSS control management in a live Card Data Environment (CDE)

Card Project Implementation Experience:

• Experience participating in at least one end-to-end card system implementation project, covering:

• • IT workstream delivery and technical task execution
  • System integration between CMS, CBS, NAPAS, and payment channels
  • SIT/UAT coordination: environment setup, test data preparation, defect tracking
  • NAPAS certification testing: test case execution, evidence documentation
  • Go-live cutover planning and production deployment
  • Post-launch hypercare support and incident monitoring
• Experience working alongside or within a PMO governance structure during a card project is strongly preferred

Ngoại ngữ / Foreign Language (English)

• Professional Working Proficiency in English (C1+) — required for reading NAPAS/Visa/Mastercard technical specifications, communicating with international vendors (CMS, HSM, scheme technical teams), writing incident reports and PIRs, and reading PCI DSS documentation.

Kiến thức chung / General Knowledge

• Am hiểu tổ chức / Understanding of the organization: Understands the card product portfolio, business objectives, and the role of IT Cards & Payment within the broader organization. Can align technical operations decisions with business priorities and communicate system status clearly to non-technical stakeholders.
• Am hiểu sản phẩm của đơn vị / Understanding of the unit’s products: Deep understanding of NAPAS Domestic Credit Card product features: credit limit management, billing cycle, revolving credit (interest calculation, minimum payment, grace period), cash advance, instalment plans (EPP), fee structures, and card issuance/lifecycle operations. Familiar with digital card products including tokenization and mobile wallet integration.
• Am hiểu quy định/quy trình tác nghiệp trong đơn vị Understanding of operational regulations and procedures: Thorough knowledge of NAPAS technical and operational specifications, PCI DSS v3.2.1/v4.0 requirements applicable to card issuance and switching environments, and SBV regulations governing card operations. Familiar with internal IT change management, incident management, and project delivery procedures. Understands card project lifecycle: requirements definition, system design review, SIT/UAT planning, NAPAS certification process, production cutover, and post-go-live hypercare. Can read and contribute to project governance documents: technical design specs, integration test plans, UAT test scripts, go-live readiness checklists, and operational handover runbooks.

Năng lực, kỹ năng chuyên môn / Professional Skills & Competencie

• Card Business & Technical Operations Knowledge: Deep understanding of the full card payment ecosystem covering — (1) Card Management System (CMS): card product setup, billing engine, fee engine, credit limit management, revolving credit (interest calculation, EPP/instalment plans, minimum payment, grace period, cash advance), statement generation; (2) Authorization & Switching: real-time online/offline authorization, stand-in processing, velocity controls, fraud rules engine, response code handling; (3) Clearing & Settlement: T+1 clearing file generation, net settlement calculation, GL reconciliation, dispute/chargeback file processing; (4) Card Lifecycle Management: full issuance workflow (application, embossing, PIN generation/mailer, card bureau integration), activation, card replacement, card cancellation, and card renewal procedures; (5) Dispute Management: chargeback workflow, retrieval request handling, re-presentment, reason code classification, dispute cycle tracking within scheme SLAs (NAPAS, Visa, Mastercard); (6) Hands-on CMS platform operation — can configure product parameters, execute batch operations, troubleshoot transaction failures, and perform reconciliation independently.
• Standards & Protocol Knowledge: Proficient in ISO 8583; NAPAS Domestic Credit Card specifications; EMV chip, 3D Secure 2.x (ACS/DS/3DS Server flows); Visa BASE I/II and Mastercard IPM clearing; EMV contactless (payWave/PayPass); HSM protocols (Thales/Futurex/Atalla key commands).
• PCI DSS & Security Technical Controls: In-depth knowledge of PCI DSS v3.2.1/v4.0 (all 12 requirements)
• IT Infrastructure, Scripting & Project Delivery Skills
• Incident & Change Management, and PMO Collaboration

Năng lực cốt lõi / Core Competencies

• Năng lực cốt lõi chung / General Core Competencies

• • Technical Problem-Solving & Analytical Thinking: Methodical troubleshooter; isolates root cause systematically before acting; uses data and logs to drive decisions; comfortable with complexity and ambiguity in production environments.
  • Communication & Stakeholder Management: Translates technical issues into clear business language; communicates proactively during incidents; works effectively with Card Operations, Fraud, Finance, Risk, and external vendors.
  • Ownership & Accountability: High sense of personal ownership over system uptime and data integrity; proactive monitoring; raises issues early; never sits on a problem; treats documentation as a responsibility, not a task.
  • Adaptability & Continuous Learning: Stays current on scheme changes (NAPAS bulletins, Visa/Mastercard operational updates), PCI DSS evolution, and emerging threats to card infrastructure; actively improves operational processes.
• Năng lực kỹ năng quản lý, lãnh đạo (áp dụng cho cấp từ trưởng nhóm trở lên) / Managerial & leadership competencies (Apply for team leader level and above).

• • Vendor Management: Holds CMS vendor, NAPAS technical team, HSM provider, and card bureau accountable on SLAs; escalates effectively; coordinates multi-vendor resolution during major incidents; tracks vendor deliverables against contractual commitments.
  • Planning & Organization: Manages multiple concurrent operational tasks and change requests; prioritizes effectively in high-pressure situations; maintains organized and up-to-date runbooks, operational calendars, and change schedules.
  • Judgment & Decision-Making: Makes sound technical decisions under time pressure during incidents; knows when to escalate vs. resolve independently; balances speed of resolution with risk of system impact; applies change management discipline consistently.