Security Engineering Intern, GRC

We are looking for a motivated Security intern to join our Security team. You'll get hands-on experience assisting with SOC 2 and ISO 27001 audits, monitoring compliance and supporting daily security tasks.

What you'll be doing:

Audit Support: Assist in preparing for external compliance audits including:

Understand auditor’s requests and inquiries

Prepare evidences and documentation that satisfy auditor’s inquiry

In-scope compliance standards include: SOC 2, ISO 27001, MAS TRMG.

Compliance Monitoring:

Stay aware of compliance obligations and recurring tasks throughout the year / audit period and coordinate with internal teams to ensure timely completion (E.g. Penetration test, incident response test, disaster recovery test schedule)

Collect sufficient artifacts of the above activities to be used to demonstrate compliance.

BAU GRC Tasks:

Assist in maintaining GRC documentation and reporting (e.g. security policies and procedures, risk registers, risk report, etc.)

Assist in conducting periodic user access review, security awareness training and phishing campaign, etc.

What we're looking for:

Currently pursuing a bachelor's or master's degree in Cybersecurity, Computer Science, IT, or related field

Basic understanding of cybersecurity concepts and network fundamentals

Familiarity with common operating systems (Windows, Linux, MacOS)

Strong analytical and problem-solving skills

Effectively communicate technical issues to diverse audiences, both in writing and verbally (Vietnamese and English)

Curiosity and eagerness to learn about IT audits, risk, compliance and to use AI tools in daily workflows

Understanding and/or experience working in a Cryptocurrency/Blockchain/Fintech/Finance Trading domain preferred.

Preferred Qualifications:

Knowledge of SIEM tools and security monitoring concepts

Familiarity with cloud platforms (AWS, Azure, or GCP) and their native security services

Exposure to IaC (Infrastructure as Code) solutions or systems automation platforms

Experience with security tools (EDR, WAF, DNS security, etc.)

Interest in pursuing cybersecurity certifications (e.g., CompTIA Security+, AWS SAA, CEH)

Interest in AI Security topics.

What’s in it for you:

Hands-on experience across multiple cybersecurity domains

Mentorship from experienced security professionals

Exposure to enterprise-grade security tools and technologies

Opportunity to participate in real security operations and projects

Potential pathway to full-time employment based on performance

Flexible schedule to accommodate academic commitments

Duration 3-6 months , with possibility of extension based on performance and mutual agreement.

Find out more about Coinhako here https://www.coinhako.com/ and don't forget to visit our Careers Page https://www.coinhako.com/join-us

By submitting your application to us, you consent to the collection, use, disclosure and processing of your personal data in accordance with our privacy policy, which is accessible at https://www.coinhako.com/legal/sg-1/privacy_policy .