Senior Information Security Engineer

Responsibilities
Compliance & Frameworks: Prepare us for our upcoming SOC 2 and SOC 1 audits, including gap analysis, control review, and evidence collection.
Security Architecture & Engineering: Review and harden our current AWS and Agentic AI infrastructure.
Vendor Risk Management: Streamline our third-party vendor review process and help fill out security questionnaires for our enterprise prospects.
Tooling & Monitoring: Evaluate and monitor security tooling, MDM, endpoint protection, and SIEM.
Incident Response: Update and test our Disaster Recovery Plan and conduct security awareness training for the broader team.
Requirements
Experience: 5+ years of dedicated Information Security experience (prior experience consulting or working fractionally is a plus).
Framework Expertise: Deep, hands-on knowledge of SOC 2 Type II, SOC 1 Type II, and TX- RAMP.
Technical Knowledge: Comfort working in an AWS SaaS-based environment. Familiarity with tools like CrowdStrike, Intune, Moysle, and SonarQube.
Communication: Ability to translate complex security risks into actionable business decisions for leadership.
Benefits
Working location: Hybrid in Ho Chi Minh City / Da Nang City
Salary range: VND 65,000,000 - 80,000,000 gross