IT Security GRC

Responsibilities:

• Analyze IT projects and provide advice on IT Security requirements / Implement and maintain security controls.
• Implement security control, risk assessment framework and program that align to regulatory requirements, ensuring documented and sustainable compliance.
• Provide advisory on technology risks, security controls and Personal Data Privacy control.
• Ensure IT Risk, IT control assessment review the appropriateness of relevant risk mitigation strategies and remedial actions with follow-up and escalation.
• Analyze, design and manage the work process, as well as to supervise the process improvement in accordance with the IT Standards.
• Assessing risk and compliance against security standards such as ISO27001, PCI DSS and NIST Cyber security standards.
• Serve as security expert and control trainings when needed.
• Attend meetings with change advisory board to determine IT Security needs.
• Develop and implement security policies, standard and procedure.

Qualifications:

• Bachelor degree or higher in Computer Science or IT related fields
• Experiences in IT Security, IT Risk Management, or IT Compliance
• Knowledge of ISO27001 ,PDPA ,Compliance and regulations.
• Develop and enhance the information security management framework.
• Experience in risk management, security control, IT Governance standard : ISO27001.
• Having knowledge in banking / Financial and insurance business in advantage.
• Good communication and interpersonal skills