ACG_3622_JOB
Our client is a leading technology company who is looking for a qualified candidate to join their firm.
- Plan and carry out on-site information security audits at supplier factories in Vietnam, covering network and system controls, endpoint and device management, access and account administration, physical security, and data protection practices.
- Independently manage the full audit process, including pre-audit preparation, factory briefing and meetings, on-site inspection, evidence collection, and submission of post-audit deliverables.
- Prepare all audit deliverables in English within the agreed timelines, including Audit Reports with findings and control references, Meeting Minutes (MoM), and daily Activity Reports.
- Consistently and accurately apply the client’s proprietary security standards by mapping on-site observations to specific control requirements and providing clear supporting evidence.
- Communicate with factory representatives in a professional and constructive manner throughout the audit process, while ensuring objectivity and factual accuracy in all findings.
- Promptly escalate significant findings to the project lead in line with established programme protocols.
- Maintain complete and auditable records of all audit activities in the designated project management system.
- Support team quality review activities to ensure consistency and accuracy of audit outputs.
Requirements
- Male candidates are required
- Minimum of 4 years of professional experience in information security auditing, IT compliance, or supply chain security assessment.
- Proven experience in independently conducting on-site audits at manufacturing or technology facilities.
- Solid working knowledge of key information security controls, including network segmentation and access control, endpoint security and MDM, account lifecycle management, logging and audit trails, and data protection.
- Experience applying a structured audit methodology, covering audit planning, evidence collection, finding documentation, and reporting, with strong accountability for the quality of deliverables.
- Proficient in both Vietnamese and English; Mandarin Chinese proficiency is an advantage.
- Bachelor’s degree or higher in Information Security, Computer Science, Engineering, or a related field.
Preferred
- Professional certification: CISSP, or equivalent.
- Experience auditing within the electronics manufacturing or technology supply chain sector.
- Familiarity with proprietary client-specific security frameworks (in addition to standard frameworks such as ISO 27001).
Contact: Giau Nguyen
Due to the immense number of applications, only shortlisted candidates will be contacted.