Information Security Manager (Senior Manager Level) ประจำสีลม

Key Responsibilities

1. Information Security Governance

• Define and develop Information Security policies, standards, guidelines, and security controls.
• Ensure that security requirements are appropriately applied across relevant systems and projects.
• Act as the key point of contact and advisor for Information Security matters across internal teams and management.

2. Security Risk & Assessment

• Assess security risks across Infrastructure, Cloud, Applications, and related solutions.
• Review security architecture and controls, and provide recommendations for risk mitigation.
• Identify security gaps and findings, and follow up on corrective actions to ensure timely resolution.

3. Infrastructure & Application Security Oversight

• Review security across Network, Infrastructure, Cloud, IAM, System Hardening, and Vulnerability Management.
• Review security across Applications, APIs, Authentication, Secure SDLC, and DevSecOps.
• Work closely with Infrastructure and Development teams to ensure that security controls and remediation actions are properly implemented.

4. Project & Customer Security Advisory

• Review security requirements for customer projects and solution designs.
• Provide security advisory support to Solution Architects, Project Managers, Presales, Infrastructure, and Development teams.
• Support customer meetings and present security approaches, risks, and controls to customers and stakeholders as appropriate.

5. Security Compliance & Management Reporting

• Support compliance with Information Security standards and frameworks such as ISO/IEC 27001 and other relevant requirements.
• Coordinate with Internal / External Audit teams as well as Quality and Compliance functions.
• Prepare and present reports on security risks, findings, remediation status, and key security issues to management.
• Promote Information Security awareness and good security practices across the organization.

Qualifications

• Bachelor’s degree or higher in Computer Science, Information Technology, Computer Engineering, Cybersecurity, Information Security, or a related field.
• At least 10 years of experience in IT / Technology, with relevant experience in Information Security, Cybersecurity, Security Governance, Security Risk, or Security Architecture.
• Strong knowledge and understanding of Infrastructure / Cloud Security and Application Security.
• Experience in Security Risk Assessment, Security Review, Security Controls, or Information Security Governance.
• Good understanding of Network Security, IAM, Vulnerability Management, Secure SDLC, OWASP, and Cloud Security.
• Good understanding of Information Security standards and frameworks such as ISO/IEC 27001, NIST Cybersecurity Framework, or CIS Controls.
• Strong communication and stakeholder management skills, with the ability to work effectively with Technical Teams, Customers, and Management.
• Experience in System Integrator (SI), IT Services, Technology Consulting, or Cybersecurity Consulting is preferred.
• Relevant certifications such as CISSP, CISM, CRISC, CCSP, ISO/IEC 27001 Lead Auditor / Lead Implementer, or other related certifications are an advantage.