Security Engineering Intern, GRC

We are looking for a motivated Security intern to join our Security team. You'll get hands-on experience assisting with SOC 2 and ISO 27001 audits, monitoring compliance and supporting daily security tasks.

What you'll be doing:

- Audit Support: Assist in preparing for external compliance audits including:

- Understand auditor’s requests and inquiries

- Prepare evidences and documentation that satisfy auditor’s inquiry

- In-scope compliance standards include: SOC 2, ISO 27001, MAS TRMG.

- Compliance Monitoring:

- Stay aware of compliance obligations and recurring tasks throughout the year / audit period and coordinate with internal teams to ensure timely completion (E.g. Penetration test, incident response test, disaster recovery test schedule)

- Collect sufficient artifacts of the above activities to be used to demonstrate compliance.

- BAU GRC Tasks:

- Assist in maintaining GRC documentation and reporting (e.g. security policies and procedures, risk registers, risk report, etc.)

- Assist in conducting periodic user access review, security awareness training and phishing campaign, etc.

What we're looking for:

- Currently pursuing a bachelor's or master's degree in Cybersecurity, Computer Science, IT, or related field

- Basic understanding of cybersecurity concepts and network fundamentals

- Familiarity with common operating systems (Windows, Linux, MacOS)

- Strong analytical and problem-solving skills

- Effectively communicate technical issues to diverse audiences, both in writing and verbally (Vietnamese and English)

- Curiosity and eagerness to learn about IT audits, risk, compliance and to use AI tools in daily workflows

- Understanding and/or experience working in a Cryptocurrency/Blockchain/Fintech/Finance Trading domain preferred.

Preferred Qualifications:

- Knowledge of SIEM tools and security monitoring concepts

- Familiarity with cloud platforms (AWS, Azure, or GCP) and their native security services

- Exposure to IaC (Infrastructure as Code) solutions or systems automation platforms

- Experience with security tools (EDR, WAF, DNS security, etc.)

- Interest in pursuing cybersecurity certifications (e.g., CompTIA Security+, AWS SAA, CEH)

- Interest in AI Security topics.

What’s in it for you:

- Hands-on experience across multiple cybersecurity domains

- Mentorship from experienced security professionals

- Exposure to enterprise-grade security tools and technologies

- Opportunity to participate in real security operations and projects

- Potential pathway to full-time employment based on performance

- Flexible schedule to accommodate academic commitments

Duration 3-6 months, with possibility of extension based on performance and mutual agreement.

Find out more about Coinhako here https://www.coinhako.com/ and don't forget to visit our Careers Page https://www.coinhako.com/join-us

By submitting your application to us, you consent to the collection, use, disclosure and processing of your personal data in accordance with our privacy policy, which is accessible at https://www.coinhako.com/legal/sg-1/privacy_policy.