Work outline:

About the Benefits Salary: 80,000–100,000THB

About the company Products: Internet service Business Type: Communication Services; Internet Services

Workplace Area: MRT Rama 9, Bangkok Working Hour: 9:00-18:00(Mon-Fri)

• Builds a strategic and comprehensive information security program that defines, develops, maintains and implements policies and processes that enable consistent, effective information security practices which minimize risk and ensure the integrity, confidentiality and availability of information that is owned, controlled and processed within the organization.
• Ensures information security policies, standards, and procedures are up-to-date.
• Initiates, facilitates, and promotes activities to foster information security awareness within the organization.
• Evaluates security trends, evolving threats, risks and vulnerabilities and applies tools to mitigate risk as necessary.
• Manages security incidents and events
• Ensure that the disaster recovery, business continuity, risk management and access controls needs of the facility are addressed.
• Ensures the company complies with the security rules of regulators.
• Collaborates with company senior management to establish governance for the security program.
• Responsible for initial and periodic information security risk assessment/analysis, mitigation and remediation. Responsible for development and implementation of security risk management plan.
• Ensure organization has audit controls to monitor activity on IT system
• Oversee periodic monitoring and reviewing of audit records to ensure that activity is appropriate
• Oversees, develops and/or delivers initial and ongoing security training to the workforce.
• Serves as information security consultant to all departments for all IT security related issues

• Thai nationality, Male/Female, age 30-40 years old
• Bachelor's degree in information systems, computer science, computer engineering
• years experiences in related field such as IT or risk officer of financial companies (banks, securities companies, funds or other financial
• Have relevant certification such as (but not limited to) CISSP , CISM, CSSLP, GIAC:GXPN, OSCP, CEH, CCNP, CCNA, Security+
• Demonstrated organization, facilitation, written and oral communication, and presentation skills