ประสบการณ์:

5 ปีขึ้นไป

ทักษะ:

Risk Management, ISO 27001

ประเภทงาน:

งานประจำ

• Oversee and be responsible for creating, reviewing, updating, and maintaining documents related to the organization's management system standards, such as ISO/IEC 27701, ISO/IEC 27001, or other relevant future standards.
• Manage and organize documents (including ROPA, DPIA, LIA, and other related documents) systematically and ensure they are traceable and auditable.
• Coordinate with relevant departments to prepare for internal and external audits and follow up on closing any observations or gaps identified.
• Participate in and support the review of internal policies and processes to ensure alignment with relevant standards and best practices.
• Coordinate with technology, data, and other support departments to ensure compliance with applicable standards.
• Regulatory Compliance.
• Monitor, track, execute, coordinate, and advise to ensure the company's operations comply with laws, regulations, and business standards.
• Manage and coordinate requirements from ETDA, NCSA, or other relevant regulatory bodies, including related conditions and practices such as Terms of Use / Terms & Conditions, digital platform requirements, cybersecurity best practices, and others.
• Support the review, update, and preparation of documents, such as Terms of Use and Privacy Notices.
• Monitor incidents related to personal data or legal/regulatory matters and support response processes if needed, including supporting the Data Protection Officer (DPO) in tasks such as recording and storing data subject requests, preparing DPO appointment announcements, and other relevant documents.
• Provide guidance to employees and stakeholders on compliance with personal data protection laws or other relevant regulations, including conducting annual training on data protection, information security, and legal compliance.
• Customer Questionnaire & Documentation.
• Responsible for responding to customer questionnaires, forms, assessments, and documents acknowledging policies related to legal compliance, data security standards, and company policies.
• Coordinate with relevant departments to ensure accurate responses.
• Maintain completed questionnaires as evidence for future audits.
• Risk Management.
• Participate in and support risk identification, risk assessment, and monitoring of controls according to the Enterprise Risk Management (ERM) framework or other organizational standards, including preparing documents and related risk management activities.
• Coordinate and gather information from various departments to identify and assess risks according to the ERM framework.
• General and Internal Coordination.
• Maintain complete, accurate, and easily retrievable documents.
• Coordinate with internal company departments, external parties, and relevant government agencies.
• Help improve work processes to ensure efficiency, transparency, and auditability.
• Perform other duties as assigned.
• Bachelor's degree or higher.
• 5-7 years of work experience, with experience in Compliance, Risk, and Data Governance. Experience in relevant ISO Standards is a plus.
• English proficiency sufficient for work purposes.
• Ability to work effectively in a team.
• Understanding of or interest in data, technology, or digital systems.
• Proficiency in basic computer applications such as Microsoft Office, PowerPoint, and Excel.
• Analytical thinking, planning, problem-solving, coordination skills, and attention to detail.
• Eager to learn with a proactive, can-do attitude and willingness to take action.
• Logical thinking and business sense: able to see the organizational picture, connect requirements, regulations, and standards, and assess the business impact appropriately.
• Self-motivated, with a willingness to develop professionally and grow within the organization.

ประสบการณ์:

1 ปีขึ้นไป

ทักษะ:

Architecture

ประเภทงาน:

งานประจำ

• Design end-to-end solution architectures aligned with business needs, domain strategy, and the architecture roadmap.
• Translate complex business requirements into scalable, secure, and resilient technical solutions.
• Lead architecture design across all levels from conceptual and high-level design to detailed application, infrastructure, and cloud architecture.
• Identify and define integration patterns within domain architecture, contributing reusable patterns back into the enterprise reference architecture.
• Review solution delivery outcomes to uncover architectural risks, challenges, and opportunities for continuous improvement.
• Maintain and enrich architecture artifacts in the architecture repository.
• Project Collaboration.
• Act as a trusted architecture partner to delivery teams across design, development, and implementation phases.
• Provide hands-on architectural guidance to engineering teams to ensure solutions meet quality, performance, and business objectives.
• Support cost estimation and infrastructure sizing based on architectural designs.
• Research, Innovation & POC.
• Explore emerging technologies and conduct Proof of Concept (POC) to validate ideas before enterprise adoption.
• Collaborate with solution vendors to gain deep understanding of platforms and technologies.
• Guide project teams to effectively reuse existing software assets and shared platforms.
• Evaluate technology options and make informed architecture recommendations.
• At leasts 5 years of experiences in software/ solution architecture.
• At least 8 years of experiences in software development or engineering roles.
• Proven experience designing enterprise-scale or cloud-based systems.
• Strong foundation in application architecture and system design.
• Hands-on experience with cloud architecture (public or hybrid).
• Solid understanding of enterprise architecture and design patterns.
• Familiarity with modern architectures such as: Microservices, Serverless, API-driven architectures.
• Good understanding of modern software development methodologies (Agile, DevOps, CI/CD).
• Excellent communication skills able to explain architecture clearly to diverse stakeholders (engineering, infrastructure, data, and business).
• Strong analytical mindset with the ability to break down complex problems.
• Fast learner who can ramp up quickly using documentation and stakeholder inputs.
• Strong time and task management with the ability to handle multiple initiatives.
• Comfortable communicating in English.