Senior Security Engineer (GRC)

Senior Security Engineer, Governance Risk and Compliance

Company

Coinhako

Conditions

6 days agoSenior Vietnam Hybrid Full Time Cybersecurity Jobs by Coinhako

Coinhako Coinhako is a Singapore-focused, MAS-regulated cryptocurrency exchange platform. It enables users to buy, sell, convert, and manage digital assets, with institutional custody and high-volume trading services also available. Distributed Funding Unknown ($10T) Investors Peak Capital Mirana Ventures Framework Ventures Blockchain Capital Pantera Capital Projects Coinhako Wallet About Coinhako Coinhako provides a crypto trading and digital-asset management platform for retail users and institutions. Users can create an account, fund it through PayNow or FAST bank transfer, and trade, buy, sell, or convert more than 200 cryptocurrencies. The company emphasizes security, regulatory compliance, and tools for managing digital assets, while offering institutional services including custody and high-volume trading solutions. View jobs by Coinhako

Skills

Access Review Audit Management Business Continuity Planning Communication Compliance Data Classification Data Loss Prevention Disaster Recovery Drata Governance Risk And Compliance Iso 27001 Pdpa Policy Management Risk Register Security Awareness Training Soc 2 Vanta Vendor Risk Management Vulnerability Management

About the Role

You'll operate at the fast-moving frontier of the crypto ecosystem, where trust, speed, and ironclad security are paramount. As a sharp, highly autonomous Senior Engineer in GRC, you'll love the details, anticipate gaps before dashboards turn red, and use human judgment to steer modern, tech-forward security frameworks. You'll balance real risk mitigation against empty paperwork, maintaining certifications, running vulnerability management programs, and owning policy, vendor risk, data protection, and business continuity programs.

Requirements

• 3–5 years in security or GRC program management, ideally at a fintech that grew through early stages
• Hands-on experience running ISO 27001 and SOC 2 audits end-to-end, including auditor management
• Deep fluency in Vanta (or Drata, with willingness to switch)
• Confident representing the security program to security teams both technically and as a trust signal
• Strong written and verbal communication
• Sound judgment on when a control gap is real risk vs. paperwork, and ability to escalate to the right audience quickly
• Strong interest in Cryptocurrency, Blockchain, Fintech, or Finance/Trading
• Proficient in English communication skill

Responsibilities

• Maintain ISO 27001 certification and prepare for SOC 2 Type 1 and 2
• Manage auditor relationships and own evidence collection in Vanta
• Own the vulnerability management SLA layer including weekly dashboards, breach escalation, and exception tracking
• Provide monthly leadership view on vulnerability management
• Own policy lifecycle including annual reviews, new policies, training rollout, attestation tracking, and exception requests
• Manage people-ops security controls including onboarding/offboarding evidence, access reviews, security awareness training, and background-check tracking
• Partner with HR on security workflow and own the auditable artifact
• Maintain vendor inventory and conduct pre-procurement assessments and annual reassessments
• Maintain the risk register and run quarterly risk reviews
• Manage DLP policy and tuning and data-classification programs
• Partner with Legal on PDPA compliance
• Own the business continuity and disaster recovery program including documentation, drills, and post-exercise improvements

Benefits

• MacBook or high-end laptop for working
• Full coverage of social insurance
• Premium health care for you and your family members
• Full 100% salary during probationary period
• Professional, friendly, well-equipped workspace
• Extensive on job training

Показать контакты