Manager Security Operations Team Leader

Role summary: This position combines people leadership within Security Operations with

cross-entity coordination of Level 1 security topics across Client SA, Client IT and the Client

Group’s APAC entities.

About the role

Within the Technologies & Operations department, you will lead and develop a Security Operations team of three cybersecurity analysts and oversee the activities of the Managed Security Service Provider (MSSP) for client IT and the client Group’s APAC entities.

Alongside this leadership responsibility, you will personally act as the central point of contact for Level 1 security topics across the APAC entities managed by client IT. You will coordinate security controls, security action plans, ICT-related audit recommendations and remediation follow-up, and the rollout of new Group security plans and processes. You will provide client SA and client IT leadership with clear, consolidated reporting.

This role requires the ability to lead and influence beyond direct hierarchical authority. You will work with multiple banks and entities, navigate governance and committee structures, and mobilize stakeholders across teams. Success depends on combining formal levers, governance forums, stakeholder management and informal influence.

Key responsibilities

1. Lead the Security Operations team

• Lead, coach and develop the three cybersecurity analysts: set objectives, allocate work, manage capacity and support individual growth.
• Provide technical guidance and mentor team members in security operations, investigation,

vulnerability remediation and automation.

• Oversee MSSP service delivery, performance and escalation against agreed responsibilities and service levels.
• Manage the team’s delivery of vulnerability management, security incident management, alert

triage, endpoint security management and certificate management services.

• Improve service quality, efficiency and scalability through automation, documented procedures and continuous improvement.

2. Coordinate Level 1 security across Client IT and APAC entities

• Act as the central point of contact between Client IT and designated contacts in the APAC

entities for Level 1 security topics.

• Coordinate the implementation and periodic execution of Level 1 security controls; collect and

consolidate control results, evidence, exceptions and corrective actions.

• Maintain a consolidated record of security action plans, including owners, target dates,

dependencies, progress and evidence of completion; escalate overdue items and unresolved

blockers.

• Coordinate follow-up of ICT-related audit recommendations and remediation across the entities in scope.
• Coordinate the rollout of new Group security plans, processes, controls and procedures, aligned with the BPCE Technology & Risk Management framework.
• Prepare and present consolidated reporting to Client IT leadership, highlighting gaps, overdue items, risks and decisions required.
• Contribute to the Group cybersecurity roadmap based on entity needs, recurring control weaknesses, audit findings and implementation constraints.

What will make the difference

• Demonstrated people management experience: ideally an ex-technical expert who has become a manager and can lead, coach and develop a team from day one.
• Strong project ownership: full accountability for coordination topics, without relying on a hierarchical manager to push progress.
• Ability to influence across teams and entities beyond formal hierarchy, building trust with multiple banks and stakeholders.
• Genuine proactivity: comfortable chasing information, following up persistently and not waiting for issues to be escalated.
• Autonomy and resilience: able to operate independently within 1–2 months, with full ownership

within approximately 3–4 months.

• Strong communication skills, with the ability to explain technical topics to non-technical audiences and present to committees.
• Credible understanding of cybersecurity fundamentals, without needing to be a hands-on technical expert.

Qualifications

• Bachelor’s degree (BSc.) in Computer Science.
• CISSP or CISM certification is highly regarded but not mandatory.

Language skills

• Very good command of English, both spoken and written, is mandatory.
• French is a plus but not mandatory.
• Thai is a plus but not mandatory.

Experience and skills required

• At least 5 years of experience in cybersecurity, including security operations and coordination of security controls, security action plans or ICT-related audit remediation.
• Experience in banking or another strongly regulated industry, such as insurance or healthcare, is preferred.
• Proven experience leading cybersecurity teams, including coaching analysts, setting priorities and managing service delivery.
• Demonstrated ability to coordinate security initiatives across multiple entities or business units in a multicultural environment, working with stakeholders outside the direct reporting line.
• Strong analytical and communication skills, with the ability to guide technical teams and explain security requirements, control gaps and remediation priorities to management.
• Strong organizational skills, balancing team leadership with personal coordination deliverables,

reliable action tracking and deadline management across multiple entities.

• Proactive, curious, persistent and autonomous.

Technical skills required

• Practical knowledge of security controls, control evidence, security action-plan tracking and the

lifecycle of ICT-related audit recommendations.

• Experience with vulnerability management tools such as Qualys, Rapid7 or Tenable.
• Experience with endpoint security tools such as Sophos Endpoints, Microsoft Defender, CrowdStrike Falcon or Cortex XDR.
• Experience with Security Orchestration, Automation and Response (SOAR) tools such as Splunk SOAR, Cortex XSOAR or Microsoft Sentinel.
• Hands-on experience with scripting or development languages such as Python, Bash, Java or

PowerShell, and automation tools such as Airflow or Ansible.

• Advanced understanding of Linux and Microsoft operating systems.
• Proficiency with Microsoft Office, particularly Excel and Power BI.

Success indicators

• Build trusted, proactive relationships with the relevant banks and APAC entities.
• Establish effective reporting, escalation and follow-up routines for Level 1 security topics.
• Take ownership of the Security Operations roadmap, team priorities and MSSP performance.
• Become autonomous on the majority of topics within the first 1–2 months and operate as a trusted

coordinator and manager within 3–4 months.

• Provide clear, actionable reporting to leadership and ensure that critical controls, audit actions and remediation items progress on time.

Job Type: Full-time

Pay: From ฿120,000.00 per month

Work Location: In person