Senior Information Security Engineer

Responsibilities

• Compliance & Frameworks: Prepare us for our upcoming SOC 2 and SOC 1 audits, including gap analysis, control review, and evidence collection.
• Security Architecture & Engineering: Review and harden our current AWS and Agentic AI infrastructure.
• Vendor Risk Management: Streamline our third-party vendor review process and help fill out security questionnaires for our enterprise prospects.
• Tooling & Monitoring: Evaluate and monitor security tooling, MDM, endpoint protection, and SIEM.
• Incident Response: Update and test our Disaster Recovery Plan and conduct security awareness training for the broader team.

Requirements

• Experience: 5+ years of dedicated Information Security experience (prior experience consulting or working fractionally is a plus).
• Framework Expertise: Deep, hands-on knowledge of SOC 2 Type II, SOC 1 Type II, and TX- RAMP.
• Technical Knowledge: Comfort working in an AWS SaaS-based environment. Familiarity with tools like CrowdStrike, Intune, Moysle, and SonarQube.
• Communication: Ability to translate complex security risks into actionable business decisions for leadership.

Benefits

• Working location: Hybrid in Ho Chi Minh City / Da Nang City
• Salary range: VND 65,000,000 - 80,000,000 gross