Security Engineer (Compliance)

About the Role

In this role, you will enhance the organization’s security posture by focusing on compliance reporting, certification readiness, documentation, and security governance. You will support our efforts to maintain global security standards (PCI DSS, ISO 27001).

You will also collaborate with multiple teams to review contracts, address missing security processes, prepare security solutions for new projects, and conduct annual security training and incident response exercises.

Responsibilities:

• Prepare and ensure timely submission of compliance reports, covering applicable regulations, decrees, data classification, and risk assessments.
• Support certification and re-certification processes for PCI DSS, ISO 27001 and other relevant security standards.
• Review and support the security and personal data protection clauses in contracts in coordination with Legal.
• Develop, maintain, and enforce security policies, procedures, and standards; collaborate with cross-functional teams to address gaps.
• Coordinate and support annual Incident Response, Business Continuity (BCP), and Disaster Recovery (DRP) drills with relevant stakeholders.
• Ensure compliance with relevant security frameworks and regulations.
• Collaborate with engineering, product, and legal teams to integrate security best practices into operations and development processes.

Qualifications:

• 2-5 years of experience in information security, compliance, or security governance.
• Strong understanding of security frameworks and regulations (e.g., PCI DSS, ISO 27001).
• Knowledge of personal data protection regulations (e.g., Vietnam PDPA/Decree 13).
• Strong communication skills with the ability to translate complex concepts for both technical and non-technical audiences.
• Preferred Certifications: ISO 27001 LA/LI, CISA, CISSP, CISM, or equivalent.

Our Tech stacks:

• Our core services consist hundreds of Golang microservices built around domain oriented, event driven architecture. All run on GCP, GKE, Istio with autoscaling, resiliency and chaos engineering mindset with full end to end observability.
• Our mobile platform was running on Flutter, component based, composable architecture. Web app largely on TypeScript, React, NeXT.JS, Tailwind CSS and composable in-house design components and framework.
• Gitlab for all code repository, CI/CD, with Backstage as centralized developer productivity platform.
• DevOps culture, you are fully responsible with design, build, and operate your own services with support from SRE, Platform team as needed
• Open-source lover, and open-source contributor. All tooling and platforms used was in-house custom built on popular open-source projects

Our Benefits:

• Competitive compensation including a 13th-month wage and up to 3 months of performance-based bonus.
• Macbook and essential equipment are provided.
• BE Corp budget (vary from your level) is allocated for using services such as transportation, food, and passenger car bookings in Be application.
• Annual health checks and premium medical healthcare (PTI) after probation.
• 15 days of annual leave is applied for the entire employees.
• Company trips, team-building activities, and happy hour events are organized on a quarterly or annual basis.