IT Governance and Security

IT Governance and Security

Responsibilities

• Develop, implement, and maintain IT Governance frameworks, policies, standards, and procedures to ensure alignment with business objectives and regulatory requirements.
• Establish and monitor IT controls, ensuring compliance with internal policies, regulatory requirements, and industry best practices.
• Coordinate IT risk assessments, identify potential risks, and recommend appropriate mitigation measures.
• Support information security governance, including security awareness, policy management, and security compliance activities.
• Monitor and improve IT governance processes, risk management, and control effectiveness.
• Collaborate with IT, Risk Management, Compliance, Internal Audit, and business units to strengthen governance and security practices.
• Support IT audits and regulatory examinations by preparing required documentation and coordinating with relevant stakeholders.
• Participate in Business Continuity Management (BCM), Disaster Recovery (DR), and IT resilience initiatives.
• Prepare governance reports, risk dashboards, and management presentations for senior management and committees.
• Stay updated on emerging cybersecurity threats, regulatory changes, and industry best practices.

Qualifications

• Bachelor's degree or higher in Information Technology, Computer Science, Information Security, Cybersecurity, or related fields.
• At least 3–5 years of experience in IT Governance, IT Risk, Information Security, IT Audit, or related areas.
• Knowledge of IT Governance frameworks and standards such as COBIT, ISO/IEC 27001, NIST, ITIL, or CIS Controls.
• Familiarity with IT risk management, cybersecurity principles, and regulatory compliance.
• Experience in the financial services, banking, securities, asset management, or fintech industry is an advantage.
• Strong analytical, problem-solving, and communication skills.
• Ability to coordinate with cross-functional teams and manage multiple priorities.
• Professional certifications such as CISA, CISM, CRISC, CISSP, ISO 27001 Lead Implementer/Auditor, or ITIL are a plus.
• Good command of both Thai and English.