IT Auditor (Cybersecurity) – Business Assurance
Aloha Consulting Group · Ho Chi Minh City, Vietnam
Staffing and Recruiting · 11-50 employees
About the role
Plan and conduct on-site information security audits at supplier factories, covering network controls, data protection, and physical security. Manage the full audit lifecycle, including evidence collection, reporting, and communicating findings to factory representatives.
What they look for
Requirements
Requires at least 4 years of experience in information security auditing or IT compliance with a focus on manufacturing or technology facilities. Candidates must hold a bachelor's degree in a relevant field and possess strong proficiency in English and Vietnamese.
Full description
ACG_3622_JOB
Our client is a leading technology company who is looking for a qualified candidate to join their firm.
- Plan and carry out on-site information security audits at supplier factories in Vietnam, covering network and system controls, endpoint and device management, access and account administration, physical security, and data protection practices.
- Independently manage the full audit process, including pre-audit preparation, factory briefing and meetings, on-site inspection, evidence collection, and submission of post-audit deliverables.
- Prepare all audit deliverables in English within the agreed timelines, including Audit Reports with findings and control references, Meeting Minutes (MoM), and daily Activity Reports.
- Consistently and accurately apply the client’s proprietary security standards by mapping on-site observations to specific control requirements and providing clear supporting evidence.
- Communicate with factory representatives in a professional and constructive manner throughout the audit process, while ensuring objectivity and factual accuracy in all findings.
- Promptly escalate significant findings to the project lead in line with established programme protocols.
- Maintain complete and auditable records of all audit activities in the designated project management system.
- Support team quality review activities to ensure consistency and accuracy of audit outputs.
Requirements
- Male candidates are required
- Minimum of 4 years of professional experience in information security auditing, IT compliance, or supply chain security assessment.
- Proven experience in independently conducting on-site audits at manufacturing or technology facilities.
- Solid working knowledge of key information security controls, including network segmentation and access control, endpoint security and MDM, account lifecycle management, logging and audit trails, and data protection.
- Experience applying a structured audit methodology, covering audit planning, evidence collection, finding documentation, and reporting, with strong accountability for the quality of deliverables.
- Proficient in both Vietnamese and English; Mandarin Chinese proficiency is an advantage.
- Bachelor’s degree or higher in Information Security, Computer Science, Engineering, or a related field.
Preferred
- Professional certification: CISSP, or equivalent.
- Experience auditing within the electronics manufacturing or technology supply chain sector.
- Familiarity with proprietary client-specific security frameworks (in addition to standard frameworks such as ISO 27001).
Contact: Giau Nguyen
Due to the immense number of applications, only shortlisted candidates will be contacted.
