Filter Jobs

Skills:

ISO 27001, DevOps, Swift

Job type:

Full-time

• Manage end-to-end cryptographic key lifecycle (generation, distribution, rotation, backup, archival, destruction).
• Administer and operate Hardware Security Modules (HSMs), preferably Thales Luna HSM.
• Define and enforce key management policies and procedures aligned with banking regulations and industry standards (e.g., PCI DSS, ISO 27001).
• Support encryption key integration across banking applications, core systems, payment systems, and digital channels.
• Conduct key ceremonies and maintain audit logs.
• Vault & Secrets Management.
• Administer enterprise vault platforms (e.g., HashiCorp Vault or similar).
• Manage secrets lifecycle (API keys, certificates, tokens, database credentials).
• Configure access control policies, role-based access, and segregation of duties.
• Integrate vault solutions with applications, DevOps pipelines, and cloud/on-prem infrastructure.
• Monitor vault security posture and perform regular health checks.
• Security & Compliance.
• Ensure compliance with regulatory requirements (BOT, PCI DSS, SWIFT CSP, etc.).
• Perform risk assessments related to cryptographic controls.
• Support audit activities and provide evidence for internal/external auditors.
• Participate in incident response related to key compromise or vault breaches.
• Architecture & Improvement.
• Contribute to cryptographic architecture design and secure key management framework.
• Support post-quantum cryptography transition planning (if applicable).
• Recommend best practices and continuous improvements for key and secrets management.
• Apply now if you have these advantages.
• Bachelor s degree or higher in computer science/ data science or any related field.
• Minimum of 3-7 years of experience in Information Security or Cryptography (Banking Financial industries are advantage).
• 3-7+ years of experience in Information Security or Cryptography.
• Hands-on experience with HSM (Thales Luna preferred).
• Experience in Vault or Secrets Management platforms (e.g., HashiCorp Vault).
• Experience in banking or financial services environment is highly preferred..
• Strong understanding of cryptographic principles (PKI, symmetric/asymmetric encryption, TLS, key wrapping, key derivation).
• Experience with key lifecycle management processes.
• Knowledge of PKI, certificate management, and CA integration.
• Familiarity with PCI DSS encryption requirements.
• Scripting skills (e.g., Bash, Python, PowerShell) are a plus.
• Why join Krungsri?.
• As a part of MUFG (Mitsubishi UFJ Financial Group), we a truly a global bank with networks all over the world.
• We offer a striking work-life balance culture with hybrid work policies (3 days in office per week).
• Unbelievable benefits such as attractive bonuses, employee loan with special rates and many more.
• Apply now before this role is close. **.
• FB: Krungsri Career(http://bit.ly/FacebookKrungsriCareer [link removed]).
• LINE: Krungsri Career (http://bit.ly/LineKrungsriCareer [link removed]).
• Talent Acquisition Department
• Bank of Ayudhya Public Company Limited
• 1222 Rama III Rd., Bangpongpang, Yannawa, Bangkok 10120
• สอบถามข้อมูลเพิ่มเติม: Talent Acquisition Center 0-2-----000.
• หมายเหตุ ธนาคารมีความจำเป็นและจะมีขั้นตอนการตรวจสอบข้อมูลส่วนบุคคลเกี่ยวกับประวัติอาชญากรรมของผู้สมัคร ก่อนที่ผู้สมัครจะได้รับการพิจารณาเข้าร่วมงานกับธนาคารกรุงศรีฯ.
• Remark: The bank needs to and will have a process for verifying personal information related to the criminal history of applicants before they are considered for employment with the bank.
• Applicants can read the Personal Data Protection Announcement of the Bank's Human Resources Function by typing the link from the image that stated below.
• EN (https://krungsri.com/b/privacynoticeen).
• ผู้สมัครสามารถอ่านประกาศการคุ้มครองข้อมูลส่วนบุคคลส่วนงานทรัพยากรบุคคลของธนาคารได้โดยการพิมพ์ลิงค์จากรูปภาพที่ปรากฎด้านล่าง.
• ภาษาไทย (https://krungsri.com/b/privacynoticeth).