Senior Engineer, GRC (Fintech)

TL;DR

Senior Engineer, GRC (Fintech): Managing compliance lifecycles, security frameworks, and risk programs for a crypto ecosystem with an accent on ISO 27001 and SOC 2 certifications. Focus on optimizing vulnerability management, streamlining vendor risk assessments, and ensuring data protection compliance.

Location: Hybrid in Vietnam

Company

Crypto exchange operating at the fast-moving frontier of the blockchain ecosystem.

What you will do

• Maintain ISO 27001 certification and prepare for SOC 2 Type 1 and 2 audits using Vanta.
• Own the vulnerability management program, including SLA tracking, breach escalation, and leadership reporting.
• Manage the policy lifecycle, conducting annual reviews and coordinating security training rollouts.
• Coordinate people-ops security controls, including onboarding/offboarding evidence and access reviews.
• Lead vendor risk management, from pre-procurement assessments to annual reassessments.
• Own the Business Continuity Plan (BCP) and Disaster Recovery (DR) programs, including drills and improvements.

Requirements

• 3–5 years of experience in security or GRC program management, preferably in early-stage fintech.
• Hands-on experience running ISO 27001 and SOC 2 audits end-to-end.
• Proficiency with Vanta or Drata for evidence collection and compliance tracking.
• Strong interest in Cryptocurrency, Blockchain, and Finance/Trading.
• Proficient English communication skills.
• Must be based in Vietnam for hybrid work.

Culture & Benefits

• High-end hardware provided (MacBook or equivalent).
• Full social insurance and premium health care for employees and their family members.
• 100% salary payment during the probationary period.
• Professional, international, and friendly startup work culture.
• Extensive on-the-job training and exposure to emerging technologies.