Security Engineering Intern GRC
You assist with SOC 2, ISO 27001, and MAS TRMG audits by understanding auditor requests, preparing evidence and documentation, monitoring compliance obligations, coordinating recurring security activities, maintaining GRC documentation, conducting user access reviews, and supporting security awareness training and phishing campaigns.
Responsibilities
- Assist with external compliance audits
- Understand auditor requests and inquiries
- Prepare evidence and documentation for auditor inquiries
- Monitor compliance obligations and recurring tasks
- Coordinate with internal teams to complete compliance activities on time
- Collect artifacts to demonstrate compliance
- Maintain GRC documentation and reporting
- Conduct periodic user access reviews
- Support security awareness training and phishing campaigns
Requirements
- Currently pursuing a bachelor's or master's degree in Cybersecurity, Computer Science, IT, or a related field
- Basic understanding of cybersecurity concepts and network fundamentals
- Familiarity with Windows, Linux, and MacOS
- Strong analytical and problem-solving skills
- Ability to communicate technical issues effectively in written and verbal Vietnamese and English
- Curiosity and eagerness to learn about IT audits, risk, compliance, and AI tools
- Knowledge of SIEM tools and security monitoring concepts
- Familiarity with AWS, Azure, or GCP and their native security services
- Exposure to Infrastructure as Code solutions or systems automation platforms
- Experience with security tools such as EDR, WAF, and DNS security
- Interest in cybersecurity certifications such as CompTIA Security+, AWS SAA, or CEH
- Interest in AI Security topics
- Understanding or experience in cryptocurrency, blockchain, fintech, or finance trading
Benefits
- Flexible schedule to accommodate academic commitments