Security Operations Manager

Contract Duration: 12 Months

Location: Sathorn, Bangkok

Work Style: Onsite 100%

Key responsibilities

1. Lead the Security Operations team

• Lead, coach and develop the three cybersecurity analysts: set objectives, allocate work, manage capacity and support individual growth.

• Provide technical guidance and mentor team members in security operations, investigation, vulnerability remediation and automation.

• Oversee MSSP service delivery, performance and escalation against agreed responsibilities and service levels.

• Manage the team’s delivery of vulnerability management, security incident management, alert triage, endpoint security management and certificate management services.

• Improve service quality, efficiency and scalability through automation, documented procedures and continuous improvement.

2. Coordinate Level 1 security across BRED SA, BRED IT and APAC entities

• Act as the central point of contact between BRED SA, BRED IT and designated contacts in the APAC entities for Level 1 security topics.

• Coordinate the implementation and periodic execution of Level 1 security controls; collect and consolidate control results, evidence, exceptions and corrective actions.

• Maintain a consolidated record of security action plans, including owners, target dates, dependencies, progress and evidence of completion; escalate overdue items and unresolved blockers.

• Coordinate follow-up of ICT-related audit recommendations and remediation across the entities in scope.

• Coordinate the rollout of new Group security plans, processes, controls and procedures, aligned with the BPCE Technology & Risk Management framework.

• Prepare and present consolidated reporting to BRED SA and BRED IT leadership, highlighting gaps, overdue items, risks and decisions required.

• Contribute to the Group cybersecurity roadmap based on entity needs, recurring control weaknesses, audit findings and implementation constraints.

Qualifications

• Bachelor’s degree (BSc.) in Computer Science.

• CISSP or CISM certification is highly regarded but not mandatory.

Language skills

• Very good command of English, both spoken and written, is mandatory.

• French is a plus but not mandatory.

• Thai is a plus but not mandatory.

Experience and skills required

• At least 5 years of experience in cybersecurity, including security operations and coordination of security controls, security action plans or ICT-related audit remediation.

• Experience in banking or another strongly regulated industry, such as insurance or healthcare, is preferred.

• Proven experience leading cybersecurity teams, including coaching analysts, setting priorities and managing service delivery.

• Demonstrated ability to coordinate security initiatives across multiple entities or business units in a multicultural environment, working with stakeholders outside the direct reporting line.

• Strong analytical and communication skills, with the ability to guide technical teams and explain security requirements, control gaps and remediation priorities to management.

• Strong organizational skills, balancing team leadership with personal coordination deliverables, reliable action tracking and deadline management across multiple entities.

• Proactive, curious, persistent and autonomous.

Technical skills required

• Practical knowledge of security controls, control evidence, security action-plan tracking and the lifecycle of ICT-related audit recommendations.

• Experience with vulnerability management tools such as Qualys, Rapid7 or Tenable.

• Experience with endpoint security tools such as Sophos Endpoints, Microsoft Defender, CrowdStrike Falcon or Cortex XDR.

• Experience with Security Orchestration, Automation and Response (SOAR) tools such as Splunk SOAR, Cortex XSOAR or Microsoft Sentinel.

• Hands-on experience with scripting or development languages such as Python, Bash, Java or PowerShell, and automation tools such as Airflow or Ansible.

• Advanced understanding of Linux and Microsoft operating systems.

• Proficiency with Microsoft Office, particularly Excel and Power BI.