Job Summary

Responsible to risk identification and assessment as well as developing tools and processes in cyber threat and IT operational risk management including reviewing, monitoring, controlling risks and establishing related policies, guidelines, procedures and reports

Role and Responsibilities

หน้าที่ความรับผิดชอบ

• Design and develop key tools and processes of operational risk management for cyber and IT risk management including coordinate to apply them to business units by balancing risks with business targets

• Collaborate with business units to identify, analyze and assess impacts from key cyber threat and IT operational risk factors

• Cooperate with business units to monitor, review and control cyber and IT operational risks to satisfy acceptable risk appetites

• Prepare risk positions in cyber and IT operational risk management and report to the management

• Establish policies, guidelines, procedures and related manuals in cyber threat and IT operational risk management

• Communicate, coordinate and set up training sessions for enhancing knowledge as well as aligning understanding and awareness of all parties in the company about significance of policies, guidelines and shared responsibilities in risk management

Qualifications

คุณสมบัติ

• Bachelor's or Master's degree in information technology, IT Management, Computer Science, Computer Engineering or related fields

• At least 3-year working experience in Risk Management and/or IT management and/or IT security

• Well verbal and written communication skills in both English and Thai

• Ability to collaborate with business and technical teams to manage cyber risks

• Analytical and critical skills with a keen eye for detail

• Experience with cybersecurity frameworks (NIST, ISO 27001) and risk assessment methodologies.

Specific knowledge and skill / ความรู้เฉพาะตำแหน่ง

• Knowledgeable in adoption trend of new technologies in banking environment; particular in risk management, marketing, products & services, customer behaviors as well as related regulations and legal notices for enhancing business growth and competitiveness

• Candidates with related certificates or experience such as CRISC, CISA, CISM would be highly considered