IT Auditor (Cybersecurity) – Business Assurance

ACG_3622_JOB

• Plan and carry out on-site information security audits at supplier factories in Vietnam, covering network and system controls, endpoint and device management, access and account administration, physical security, and data protection practices.
  
• Independently manage the full audit process, including pre-audit preparation, factory briefing and meetings, on-site inspection, evidence collection, and submission of post-audit deliverables.
  
• Prepare all audit deliverables in English within the agreed timelines, including Audit Reports with findings and control references, Meeting Minutes (MoM), and daily Activity Reports.
  
• Consistently and accurately apply the client’s proprietary security standards by mapping on-site observations to specific control requirements and providing clear supporting evidence.
  
• Communicate with factory representatives in a professional and constructive manner throughout the audit process, while ensuring objectivity and factual accuracy in all findings.
  
• Promptly escalate significant findings to the project lead in line with established programme protocols.
  
• Maintain complete and auditable records of all audit activities in the designated project management system.
  
• Support team quality review activities to ensure consistency and accuracy of audit outputs.
  

• Male candidates are required
  
• Minimum of 4 years of professional experience in information security auditing, IT compliance, or supply chain security assessment.
  
• Proven experience in independently conducting on-site audits at manufacturing or technology facilities.
  
• Solid working knowledge of key information security controls, including network segmentation and access control, endpoint security and MDM, account lifecycle management, logging and audit trails, and data protection.
  
• Experience applying a structured audit methodology, covering audit planning, evidence collection, finding documentation, and reporting, with strong accountability for the quality of deliverables.
  
• Proficient in both Vietnamese and English; Mandarin Chinese proficiency is an advantage.
  
• Bachelor’s degree or higher in Information Security, Computer Science, Engineering, or a related field.
  

• Professional certification: CISSP, or equivalent.
  
• Experience auditing within the electronics manufacturing or technology supply chain sector.
  
• Familiarity with proprietary client-specific security frameworks (in addition to standard frameworks such as ISO 27001).
  

Due to the immense number of applications, only shortlisted candidates will be contacted.