Senior Cybersecurity Engineer (IoT / OT / ICS)

TÜV SÜD Group – A global leader in the field of testing, inspection, management system certification and product certification renowned for quality, integrity and technical excellence.

Established more than 150 years ago in Germany, TÜV SÜD Group is a leading global provider of technical services with more than 30,000 highly skilled employees across 1,000 offices worldwide. TÜV SÜD Group offers a wide range of testing & product certification, inspection, auditing & system certification, training and knowledge services. We are a premium quality, safety, and sustainability solutions provider.

Lead cybersecurity assessments and conformity evaluations for IoT, OT, and ICS products, operating with a high degree of autonomy to adapt to evolving requirements, support client engagements, and drive technical and business-aligned capability development.

Key Responsibilities

• Lead cybersecurity assessments (e.g. VAPT, code review, threat modelling) across IoT, OT, and ICS products and systems
• Define and scope assessment engagements, adapting testing approaches based on product architecture, risk profile, and regulatory requirements
• Support client engagements and pre-sales activities by advising on cybersecurity, compliance, and service capabilities
• Lead conformity assessments, including technical evaluations and structured review of product documentation
• Interpret and apply regulatory standards (e.g. ETSI, IEC, NIST, CRA, RED) into practical and adaptable assessment approaches
• Evaluate and challenge manufacturer risk assessments, identifying gaps and determining adequacy against applicable requirements
• Take ownership of delivery outcomes, proactively identifying gaps, resolving issues, and driving workstreams to completion
• Troubleshoot and resolve technical challenges during hands-on assessments, including navigating incomplete or ambiguous system conditions
• Act as a subject matter expert, providing guidance across teams, projects, and customer engagements
• Drive development and refinement of cybersecurity service offerings in response to evolving technical and regulatory landscapes
• Translate business needs and regulatory requirements into practical workflows, methodologies, and technical capabilities for the lab
• Contribute to team growth by strengthening technical capabilities and supporting direction-setting initiatives
• Represent the organization in external engagements, including technical presentations and industry events
• Engage with senior stakeholders, including C-level management, to communicate the role, capabilities, and value of the cybersecurity lab and its services
• Collaborate across teams to ensure consistent and effective service delivery

Key Requirements

• Degree in Computer Science, Information Security, Computer/Information Engineering, or related field
• 4–6+ years of experience in cybersecurity, with exposure to IoT, OT, ICS, or product security environments
• Proven experience leading cybersecurity assessments and technical engagements
• Experience in client-facing roles, including scoping, advisory, and stakeholder engagement
• Strong expertise in cybersecurity testing, product security, and risk assessment frameworks
• Strong understanding and practical application of regulatory standards and conformity assessment processes
• Ability to operate in dynamic, ambiguous environments with high adaptability
• Strong analytical and troubleshooting skills for complex technical issues
• Demonstrated ownership mindset with ability to independently identify gaps and drive solutions
• Ability to translate business and regulatory requirements into practical technical workflows
• Strong ability to produce, review, and maintain audit-ready technical documentation
• Strong communication and stakeholder management skills, including engagement with senior/executive stakeholders
• Leadership capability, including mentoring and developing team members
• Experience contributing to service development or technical capability building is an advantage
• Familiarity with conformity assessment, certification, or regulatory compliance is preferred
• Relevant certifications (e.g. OSCP, CREST, GPEN, CISA, CISM, CISSP) are an advantage

Benefits

• Working in an international dynamic and friendly environment
• 15 annual leaves, 15 paid sick leaves, Christmas leave
• 13th-month salary, bonus based on performance and business result
• Social insurance, health insurance, unemployment insurance base on full basic salary (Vietnamese Law)
• Insurance benefit package (Accident insurance 24/7, Health care insurance, Business travel insurance), annual health check
• Free parking
• Ad-hoc staff engagement events, team-building activities, company trip
• Participate in the company’s training programs, LinkedIn Learning license holder (fee supported by company base on company’s policy)

We test, we audit, we inspect, we advise. We never stop challenging ourselves for the safety of society and its people. We breathe technology, we strive for professional excellence, and we leave a mark. We take the future into our hands. We are TÜV SÜD Group.

Work Area: Digital, IT, IT Security & Safety

Country/Region: Viet Nam

Job Location: Ho Chi Minh City

Working Model : Onsite

Employment Type: Full time / regular

Company: TUV SUD Vietnam Co. Ltd.

Org Unit Code: ENEL

Requisition ID: 5519