Senior Information Security Engineer

Company: Reco's client

Working Location: Da Nang/Ho Chi Minh, Viet Nam

Salary: Up to 60,000,000 VND

Level: SENIOR

Job Description:

• Compliance & Frameworks: Prepare us for our upcoming SOC 2 and SOC 1 audits, including gap analysis, control review, and evidence collection.

• Security Architecture & Engineering: Review and harden our current AWS and Agentic AI infrastructure

• Vendor Risk Management: Streamline our third-party vendor review process and help fill out security questionnaires for our enterprise prospects.

• Tooling & Monitoring: Evaluate, and monitor security tooling MDM, endpoint protection, SIEM.

• Incident Response: Update and test our Disaster Recovery Plan and conduct security awareness training for the broader team.

Job Requirements:

Must Have:

• 4+ years of hands-on Information Security experience, preferably in an internal/in-house security environment.

• Experience owning or supporting internal security policies, employee security awareness, endpoint/device security, access reviews, and security compliance activities.

• Strong practical experience in GRC/Compliance and hands-on security operations, including several of: Incident Response, Vulnerability Management, Security Audit, IAM, SIEM, Vendor Risk Management, and AWS Security.

• Hands-on experience with SOC 2 Type II, SOC 1 Type II, and/or TX-RAMP compliance frameworks.

• Experience managing security compliance activities end-to-end, including gap analysis, control review, evidence collection, and audit preparation.

• Experience with Vendor Security Reviews / Third-Party Risk Assessment and completing security questionnaires for customers or enterprise clients.

• Experience performing Access Certification / Access Review and supporting IAM-related security activities.

• Hands-on experience with software patching / vulnerability remediation and tracking remediation activities.

• Experience with cloud security, preferably in AWS SaaS environments.

• Strong understanding of security governance, risk management, and security best practices.

• Ability to assess technical security risks and translate them into clear, actionable recommendations.

• Experience working in a small, lean, or growing security team, owning multiple security functions end-to-end.

• Strong English communication skills (Upper-Intermediate or above).

Hybrid DN/HCM - Remote for candidate based in Hanoi

Duration: 6 months

Start: ASAP

Benefits & Policies:

• Candidates will sign a contract with RECO and work directly under the management of RECO’s clients.

• Compensation is based on a 12-month annual budget. The 13th-month salary and bonuses are already included in the monthly compensation.

• 100% salary during the probation period.

• Other benefits and policies in accordance with RECO’s Staffing service regulations.

• Flexible contract options: candidates can choose between an Employment Contract or a Freelance/Collaborator Contract.