Security Engineering Intern, GRC at CoinHako

<p style="min-height:1.5em">We are looking for a motivated Security intern to join our Security team. You'll get hands-on experience assisting with SOC 2 and ISO 27001 audits, monitoring compliance and supporting daily security tasks.</p><p style="min-height:1.5em"></p><p style="min-height:1.5em"><strong>What you'll be doing:</strong></p><ul style="min-height:1.5em"><li><p style="min-height:1.5em"><strong>Audit Support:</strong> Assist in preparing for external compliance audits including:</p><ul style="min-height:1.5em"><li><p style="min-height:1.5em">Understand auditor’s requests and inquiries</p></li><li><p style="min-height:1.5em">Prepare evidences and documentation that satisfy auditor’s inquiry</p></li><li><p style="min-height:1.5em">In-scope compliance standards include: SOC 2, ISO 27001, MAS TRMG.</p></li></ul></li><li><p style="min-height:1.5em"><strong>Compliance Monitoring:</strong></p><ul style="min-height:1.5em"><li><p style="min-height:1.5em">Stay aware of compliance obligations and recurring tasks throughout the year / audit period and coordinate with internal teams to ensure timely completion (E.g. Penetration test, incident response test, disaster recovery test schedule)</p></li><li><p style="min-height:1.5em">Collect sufficient artifacts of the above activities to be used to demonstrate compliance.</p></li></ul></li><li><p style="min-height:1.5em"><strong>BAU GRC Tasks:</strong></p><ul style="min-height:1.5em"><li><p style="min-height:1.5em">Assist in maintaining GRC documentation and reporting (e.g. security policies and procedures, risk registers, risk report, etc.)</p></li><li><p style="min-height:1.5em">Assist in conducting periodic user access review, security awareness training and phishing campaign, etc.</p></li></ul></li></ul><p style="min-height:1.5em"></p><p style="min-height:1.5em"><strong>What we're looking for:</strong></p><ul style="min-height:1.5em"><li><p style="min-height:1.5em">Currently pursuing a bachelor's or master's degree in Cybersecurity, Computer Science, IT, or related field</p></li><li><p style="min-height:1.5em">Basic understanding of cybersecurity concepts and network fundamentals</p></li><li><p style="min-height:1.5em">Familiarity with common operating systems (Windows, Linux, MacOS)</p></li><li><p style="min-height:1.5em">Strong analytical and problem-solving skills</p></li><li><p style="min-height:1.5em">Effectively communicate technical issues to diverse audiences, both in writing and verbally (Vietnamese and English)</p></li><li><p style="min-height:1.5em">Curiosity and eagerness to learn about IT audits, risk, compliance and to use AI tools in daily workflows</p></li><li><p style="min-height:1.5em">Understanding and/or experience working in a Cryptocurrency/Blockchain/Fintech/Finance Trading domain preferred.</p><p style="min-height:1.5em"></p></li></ul><p style="min-height:1.5em"><strong>Preferred Qualifications:</strong></p><ul style="min-height:1.5em"><li><p style="min-height:1.5em">Knowled