Advanced Security Governance Professional. (KTG3BR)

Security Policy Management

• Develop, update, and maintain IT Security Policies, Standards, and Frameworks in alignment with industry standards (e.g., ISO 27001, NIST).
• Lead the annual policy review lifecycle, collaborating with key stakeholders to ensure policies remain current and reflective of emerging risks, technology, and regulatory requirements.

 Security Standards Governance

• Lead annual certification and regular governance activities to ensure security standards compliance and update steering committees to review security metrics, and projectes status.

 Security Assurance

• Conduct periodic internal security assurance assessments and security control evaluations across applications, infrastructure.
• Develop and oversight Key Security Issues and present actionable security assurance metrics/dashboard from KBank/KBTG/KGroup Subsidiaries to executives.

 IT Regulations Compliance

• Monitor and analyze Thailand and regional regulatory requirements (e.g., BOT, SEC, NCSA), then conduct gap analyses against regulatory updates and collaborate with cross-functional teams to implement necessary controls.
• Ensure ongoing readiness for regulatory examinations and maintain compliance alignment with IT systems.
• Coordinate on third party assessments with security team

Audit Liaison

• Serve as the primary Point of Contact (PoC) for all internal, external, and regulatory security/IT audits.
• Facilitate evidence collection, audit interviews, and documentation requests to streamline audit workflows.
• Track audit findings, management action plans, and remediation efforts to ensure timely resolution of security deficiencies.

Remark: This position requires a criminal record information check prior consideration for employment to ensure safety and maintain standards of the organization.