Senior Auditor (Digital Trust)
At a glance
Senior Audit & Controls role at SGS. Quận 3 · full-time.
Pay not stated Audit & Controls salary
financeroles summary, based on the employer's posting.
What you'll do
- Carry out ISO 27001, ISO 27701 and cloud reviews, assessing AI exposure and privacy safeguards
- Attend pre-sales meetings with Sales, lend technical credibility and help tailor solutions for technology clients
- Develop knowledge of emerging schemes and topics such as ISO 42001, cybersecurity regulation or digital ESG
- Put cyber concerns into clear business language for executives and stay constructive when audits uncover difficult findings
- Use digital tools to improve internal processes, resolve problems proactively and support teammates
What you bring
- A university qualification in computer science, information technology or cybersecurity
- At least five years in IT security, IT risk or IT auditing, including eighteen months in ISO 27001 or specialized IT audits
- An ISO 27001 Lead Auditor credential is mandatory
- Strong English communication, in writing and conversation
Who this fits
This senior role suits an auditor who can pair technical assessment with sales support and clear communication with executives. The job is onsite in Quận.
From the employer
SGS is the world’s leading inspection, verification, testing and certification company. SGS is recognised as the global benchmark for quality and integrity. With more than 96,000 employees, SGS operates a network of over 2,600 offices and laboratories around the world.
As a champion of "Digital Trust," this role is the face of the organization in the fast-evolving tech landscape. Beyond auditing ISMS/PIMS, the Senior Auditor must be a proactive learner who anticipates cyber trends, supports Sales in penetrating the tech market, and communicates security risks as business opportunities. This role demands a modern, agile, and highly communicative professional.
Advanced Digital Auditing: Conduct ISO 27001, 27701, and cloud security audits. Evaluate AI-related risks and data privacy controls in modern tech environments.
Sales Enablement: Accompany Sales to pre-sales meetings to build technical credibility. Help design tailored solutions for tech giants and startups alike.
Market Vision & Scheme Expansion: Proactively research and develop expertise in new areas like ISO 42001 (AI Management), Cybersecurity Act, or ESG in Digital. Always be "ahead of the curve."
Stakeholder Communication: Translate complex cyber risks into clear business language for C-level executives. Maintain a collaborative and helpful posture, even during difficult audit findings.
Agility & Proactivity: Actively contribute to internal process improvements using digital tools. Show high initiative in solving problems and supporting teammates.
Education: University degree in Computer Science, Information Technology, or Cyber Security.
Experience: Total work experience ≥ 5 years in IT security, IT risk management, or IT auditing.
Auditing: Experience in ISO 27001 or specialized IT audits ≥ 1.5 year.
Certification: Mandatory ISO 27001 Lead Auditor certificate. Preferred: CISA, CISSP, or CISM.
Good command of English (both written and verbal).
Technical Skills: Knowledge of cloud security (AWS/Azure/Google), data privacy laws (GDPR/Vietnam Decree 13), and penetration testing methodologies.
Attributes: Highly proactive, curiosity-driven, and adaptable to rapid technological changes.