SGS is the world’s leading inspection, verification, testing and certification company. SGS is recognised as the global benchmark for quality and integrity. With more than 96,000 employees, SGS operates a network of over 2,600 offices and laboratories around the world.
As a champion of "Digital Trust," this role is the face of the organization in the fast-evolving tech landscape. Beyond auditing ISMS/PIMS, the Senior Auditor must be a proactive learner who anticipates cyber trends, supports Sales in penetrating the tech market, and communicates security risks as business opportunities. This role demands a modern, agile, and highly communicative professional.
Advanced Digital Auditing: Conduct ISO 27001, 27701, and cloud security audits. Evaluate AI-related risks and data privacy controls in modern tech environments.
Sales Enablement: Accompany Sales to pre-sales meetings to build technical credibility. Help design tailored solutions for tech giants and startups alike.
Market Vision & Scheme Expansion: Proactively research and develop expertise in new areas like ISO 42001 (AI Management), Cybersecurity Act, or ESG in Digital. Always be "ahead of the curve."
Stakeholder Communication: Translate complex cyber risks into clear business language for C-level executives. Maintain a collaborative and helpful posture, even during difficult audit findings.
Agility & Proactivity: Actively contribute to internal process improvements using digital tools. Show high initiative in solving problems and supporting teammates.
Education: University degree in Computer Science, Information Technology, or Cyber Security.
Experience: Total work experience ≥ 5 years in IT security, IT risk management, or IT auditing.
Auditing: Experience in ISO 27001 or specialized IT audits ≥ 1.5 year.
Certification: Mandatory ISO 27001 Lead Auditor certificate. Preferred: CISA, CISSP, or CISM.
Good command of English (both written and verbal).
Technical Skills: Knowledge of cloud security (AWS/Azure/Google), data privacy laws (GDPR/Vietnam Decree 13), and penetration testing methodologies.
Attributes: Highly proactive, curiosity-driven, and adaptable to rapid technological changes.