IT Auditor (Cybersecurity) – Business Assurance

ACG3622JOB

• Plan and carry out on-site information security audits at supplier factories in Vietnam covering network and system controls endpoint and device management access and account administration physical security and data protection practices.
  
• Independently manage the full audit process including pre-audit preparation factory briefing and meetings on-site inspection evidence collection and submission of post-audit deliverables.
  
• Prepare all audit deliverables in English within the agreed timelines including Audit Reports with findings and control references Meeting Minutes (MoM) and daily Activity Reports.
  
• Consistently and accurately apply the clients proprietary security standards by mapping on-site observations to specific control requirements and providing clear supporting evidence.
  
• Communicate with factory representatives in a professional and constructive manner throughout the audit process while ensuring objectivity and factual accuracy in all findings.
  
• Promptly escalate significant findings to the project lead in line with established programme protocols.
  
• Maintain complete and auditable records of all audit activities in the designated project management system.
  
• Support team quality review activities to ensure consistency and accuracy of audit outputs.
  

• Male candidates are required
  
• Minimum of 4 years of professional experience in information security auditing IT compliance or supply chain security assessment.
  
• Proven experience in independently conducting on-site audits at manufacturing or technology facilities.
  
• Solid working knowledge of key information security controls including network segmentation and access control endpoint security and MDM account lifecycle management logging and audit trails and data protection.
  
• Experience applying a structured audit methodology covering audit planning evidence collection finding documentation and reporting with strong accountability for the quality of deliverables.
  
• Proficient in both Vietnamese and English; Mandarin Chinese proficiency is an advantage.
  
• Bachelors degree or higher in Information Security Computer Science Engineering or a related field.
  

• Professional certification: CISSP or equivalent.
  
• Experience auditing within the electronics manufacturing or technology supply chain sector.
  
• Familiarity with proprietary client-specific security frameworks (in addition to standard frameworks such as ISO 27001).
  

Due to the immense number of applications only shortlisted candidates will be contacted.