IT Security Lead

About the role

We are seeking an experienced IT Security Lead to join our team at our Sathon Bangkok office. This is a strategic role designed to safeguard our critical information assets and protect our organization against evolving security threats. As IT Security Lead, you will be responsible for developing, implementing, and maintaining comprehensive security strategies that align with industry and ensuring the confidentiality, integrity, and availability of our systems and data.

Key responsibilities

• Develop, implement, and maintain information security policies, procedures, and standards across the organisation
• Lead the identification, assessment, and mitigation of security risks and vulnerabilities within IT infrastructure and applications
• Oversee security incident response planning, investigation, and resolution to minimise impact on business operations
• Manage security tools and technologies including firewalls, intrusion detection systems, antivirus solutions, and access control systems
• Conduct regular security audits, penetration testing, and vulnerability assessments to ensure compliance with industry regulations and standards
• Collaborate with IT operations, application development, and business units to integrate security into all processes and systems
• Ensure compliance with relevant legislation, regulations, and industry standards such as ISO 27001, healthcare data protection requirements, and personal data protection laws
• Develop and deliver security awareness training programmes to all staff members
• Prepare security reports and metrics for senior management, highlighting key risks, remediation efforts, and security posture

What we're looking for

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field

• Minimum 5 years of experience in IT security, in Banking and Insurance is preferred

• Proven expertise in security infrastructure, including firewalls, intrusion detection/prevention systems, secure access control, and encryption technologies

• Strong knowledge of security frameworks and standards including ISO 27001, NIST Cybersecurity Framework, and healthcare-specific security requirements

• Strong communication and stakeholder management abilities, with the capacity to communicate complex security concepts to non-technical audiences

• Good Command in English both speaking and writing skills