SENIOR INFORMATION SECURITY ENGINEER

Working location: Hybrid in Ho Chi Minh City / Da Nang City or Remote full-time

Salary range: VND 65,000,000 - 80,000,000 gross

RESPONSIBILITIES

The company is a financial tech company in the accounting and subledger space. We are looking for a security engineer to augment our current team and help us manage our operational security. Your core responsibilities will include third-party risk assessments, vulnerability monitoring, IAM reviews, and maintaining our compliance standards.

We need someone who can hit the ground running and take ownership of the following initiatives:

· Compliance & Frameworks: Prepare us for our upcoming SOC 2 and SOC 1 audits, including gap analysis, control review, and evidence collection.

· Security Architecture & Engineering: Review and harden our current AWS and Agentic AI infrastructure.

· Vendor Risk Management: Streamline our third-party vendor review process and help fill out security questionnaires for our enterprise prospects.

· Tooling & Monitoring: Evaluate, and monitor security tooling MDM, endpoint protection, SIEM.

· Incident Response: Update and test our Disaster Recovery Plan and conduct security awareness training for the broader team.

REQUIREMENTS

· Experience: 5+ years of dedicated Information Security experience (prior experience consulting or working fractionally is a plus).

· Framework Expertise: Deep, hands-on knowledge of SOC 2 Type II, SOC 1 Type II, and TX-RAMP.

· Technical Knowledge: Comfort working in an AWS SaaS-based environment. Familiarity with tools like CrowdStrike, Intune, Moysle, and SonarQube.

· Communication: Ability to translate complex security risks into actionable business decisions for leadership.