เงื่อนไขการค้นหา

ประสบการณ์:

3 ปีขึ้นไป

ทักษะ:

System Security

ประเภทงาน:

งานประจำ

• Participate in gathering and analyzing business and technical requirements to develop enterprise-wide Identity and Access Management (IAM) processes and procedures.
• Demonstrate a solid understanding of risk and change management, security policies and controls, user account lifecycle management, onboarding/offboarding, role-based access control (RBAC), access governance, and directory services.
• Translate business requirements into specific system, application, or process designs.
• Collaborate with cross-functional teams, including business units and technical stakeholders, to identify and define functional requirements, and contribute to or lead the design of IAM solutions.
• Engage in a broad range of IAM design activities from requirements analysis to implementation.
• Apply your knowledge of various IAM products and domains, with the ability to quickly adapt to new tools and technologies through self-learning or formal training.
• Provide support for identity provisioning, governance platforms, and privileged access management (PAM) tools.
• Lead and contribute to IAM-related projects to ensure successful delivery of objectives.
• Identify and communicate high-level functional gaps, risks, and potential issues, and propose effective solutions.
• Monitor service delivery against SLAs and escalate exceptions as needed.
• Perform IAM-related risk assessments and consult on project implementations to ensure alignment with RBAC frameworks and internal security policies.
• Drive improvements in RBAC processes, governance policies, and IAM lifecycle workflows.
• Lead or contribute to incident and problem management efforts, ensuring root cause analysis and future incident mitigation.
• Participate in on-call production support rotations and work with vendors to resolve technical issues.
• Influence the IAM strategy by making informed decisions on complex technical challenges.
• Support internal and external audit readiness by preparing and organizing required audit documentation.
• Design and implement key management controls to ensure encryption key security throughout the lifecycle.
• Conduct physical access control reviews and physical security assessments for restricted areas.
• Promote and extend secure access control practices across the organization and its affiliates.
• Essential Skills & PrerequisitesA positive, proactive mindset with strong empathy and team collaboration skills.
• Bachelor s or Master s degree in Computer Engineering, Information Security, MIS, or a related field.
• Minimum of 3 years of experience in cybersecurity or IAM domains.
• Solid foundation in information security principles and best practices.
• Knowledge of international security frameworks and standards, such as COBIT, NIST 800 series, ISO/IEC 27001, PCI-DSS, and OWASP.
• Familiarity with end-to-end security architecture including network, platform, and application layers.
• Experience with application/system security controls, IAM risk assessments, and access governance.
• Strong skills in technical writing, documentation, process mapping, and visual communication.
• Ability to develop and execute a clear vision for IAM and security solutions.
• Why Ascend Money?Contribute to a safer digital world.
• Gain hands-on experience with cutting-edge cybersecurity challenges.
• Grow your career in a dynamic, fast-moving environment.
• Don t miss this opportunity to be part of something big! Apply now and take the next step with Ascend Money.
• Apply Now: CLICK

ประสบการณ์:

7 ปีขึ้นไป

ทักษะ:

Electrical Engineering, Mechanical Engineering, English, Thai

ประเภทงาน:

งานประจำ

• วางแผน และดำเนินการในการบำรุงรักษาอุปกรณ์และโครงสร้างต่าง ๆ ในสปา เพื่อให้มีการทำงานอย่างมีประสิทธิภาพและคงทนต่อการใช้งานในระยะยาว.
• จัดการทีมวิศวกรรมและช่างซ่อมบำรุงอาวุโส ให้มีประสิทธิภาพและความสามารถในการแก้ไขปัญหาที่เกิดขึ้น.
• ดูแลการดำเนินงานและการบริการซ่อมบำรุงที่ให้บริการสำหรับลูกค้า โดยให้ความสำคัญกับคุณภาพและความพึงพอใจของลูกค้า.
• พัฒนาและปรับปรุงกระบวนการซ่อมบำรุงเพื่อเพิ่มประสิทธิภาพและความเร็วในการให้บริการ.
• จัดการและควบคุมงบประมาณสำหรับฝ่ายวิศวกรรมและซ่อมบำรุง.
• ปริญญาตรีหรือปริญญาโทในสาขาวิศวกรรม หรือสาขาที่เกี่ยวข้อง.
• ประสบการณ์ทำงานที่เกี่ยวข้องอย่างน้อย 7-10 ปี โดยมีประสบการณ์ในการจัดการทีมและโครงการซ่อมบำรุงอาวุโส.
• มีความคิดริเริ่มและสามารถแก้ไขปัญหาทางเทคนิคที่ซับซ้อนได้อย่างมีประสิทธิภาพ.
• มีความเชี่ยวชาญในการใช้เครื่องมือและอุปกรณ์ที่ใช้ในการซ่อมบำรุงอาวุโส.
• มีทักษะในการสื่อสารและประสานงานกับผู้อื่นในทีมและแผนกอื่น ๆ ภายในองค์กร.
• มีความคุ้นเคยกับข้อกำหนดและมาตรฐานความปลอดภัยในสถานที่ทำงาน โดยเฉพาะในสถานที่ที่มีโครงสร้างและอุปกรณ์อาวุโส..

ประสบการณ์:

3 ปีขึ้นไป

ทักษะ:

Legal, Financial Analysis, Project Management, English

ประเภทงาน:

งานประจำ

• Direct and manage contract guard force to run daily data center operations.
• Handle site security incidents, escalations or any other security related issues.
• Provide after-hours on-call management support and participate in emergent, large scale event response when needed.
• Participate in re-occurring data center security audits and reviews.
• Executes established compliance processes with AWS policies, standards, guidelines and relevant legal and regulatory requirements.
• Provides input on, and may develop security methodologies, policies and procedures.
• Write reports and communicate with management on the status of physical security operations.
• Oversee new security construction or retrofit projects.
• Manage the security P&L for assigned site(s), assist management with financial analysis and contribute to financial decisions for security requirements.
• Collaborate with other teams to protect AWS Data Center personnel, information and assets.
• A day in the life
• Mission: Deliver pioneering physical security by working vigorously to earn and keep customer trust; providing a safe and secure environment for our people, assets, and customer data.
• Vision: Develop exceptional security professionals, consistently apply security processes, and pioneer new technologies that effectively balance security requirements with operational needs.
• Diverse Experiences
• AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn t followed a traditional path, or includes alternative experiences, don t let it stop you from applying.
• Why AWS?
• Amazon Web Services (AWS) is the world s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating that s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.
• Inclusive Team Culture
• AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do.
• Mentorship & Career Growth
• We re continuously raising our performance bar as we strive to become Earth s Best Employer. That s why you ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.
• Work/Life Balance
• We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there s nothing we can t achieve.
• BASIC QUALIFICATIONS.
• 3+ year s experience managing contract security and physical security operation programs such as Access Control/Intrusion Detection and CCTV Surveillance systems.
• 3+ years in Project Management experience and creating process improvement procedure.
• Experience in managing vendors/vendor teams.
• PREFERRED QUALIFICATIONS.
• Bachelor s degree and or equivalent professional experience in corporate or government security environment.
• 3+ years experience creating and implementing emergency planning programs, physical security countermeasures.
• Excellent oral and written communication skills.
• Proficiency in both Thai and English language.
• Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you re applying in isn t listed, please contact your Recruiting Partner.

ประสบการณ์:

2 ปีขึ้นไป

ทักษะ:

Security Design, Big Data, English

ประเภทงาน:

งานประจำ

• Perform cyber security and IT security assessments for clients (e.g. cyber security program assessment, cyber security risk assessments, IT network infrastructure reviews, system technical configurations review, information security policies and processes/procedures review etc.).
• Work on IT security design, analysis and implementation of security protection solution.
• Evaluate and analyze threat, vulnerability, system weakness, impact and risk to secu ...
• Advise clients on the security issues, including explanation on the technical details and how they can remediate the vulnerabilities in the processes, controls and systems.
• Advise client on the security incident response end-to-end process (i.e. preparation, detection, analysis, response and recovery of the security incident).
• Skills and attributes for success.
• To qualify for the role you must have.
• Bachelor's degree or Master s degree in Computer Engineering, Computer Science, Information Systems, IT Security, ICT or other related fields.
• Minimum 2 years' experience in such areas as IT security management design and implementation, IT security assessment and IT technical background.
• Familiar with leading IT security processes and tools.
• Highly proficient in both English and Thai with good written and oral communication and analytical skills.
• Ideally, you ll also have.
• Having experience in project planning and management will be a plus.
• Professional certifications such as Offensive Security Certified Professional (OSCP), Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP), and / or Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or ISO27001 will be highly considered.
• Experience in new generation security practices (i.e. DevSecOps, iPentest, RedTeaming, System Resilience Design).
• Experience in Emerging Technologies (i.e. Cloud Computering, Blockchain, Big Data, A.I./M.L.).
• We re interested in intellectually curious people with a genuine passion for cyber security. With your specialization in attack and penetration testing, we ll turn to you to speak up with innovative new ideas that could make a lasting difference not only to us - but also to the industry as a whole. If you have the confidence in both your presentation and technical abilities to grow into a leading expert here, this is the role for you.
• What we offer.
• We offer a competitive remuneration package. Our comprehensive Total Rewards package includes support for flexible working and career development, covering holidays, health and well-being, insurance, savings and a wide range of discounts, offers and promotions.
• Continuous learning: You ll develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We ll provide the tools and flexibility, so you can make a meaningful impact, your way.
• Transformative leadership: We ll give you the insights, coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You ll be embraced for who you are and empowered to use your voice to help others find theirs.
• If you can demonstrate that you meet the criteria above, please contact us as soon as possible.
• The exceptional EY experience. It s yours to build.
• EY | Shape The Future with Confidence.
• EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.
• Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.
• Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

ประสบการณ์:

3 ปีขึ้นไป

ทักษะ:

Industry trends

ประเภทงาน:

งานประจำ

• Collaborate with sales teams to identify customer requirements and propose appropriate cybersecurity solutions.
• Conduct product demonstrations, proof-of-concepts (PoCs), and presentations for Palo Alto, Fortinet, and Cisco security products.
• Respond to RFPs/RFIs with detailed technical responses and solution designs.
• Design and architect cybersecurity solutions including firewalls, intrusion prevention systems (IPS), secure access, and threat intelligence platforms.
• Ensure proposed solutions align with customer environments and business goals.
• Build strong relationships with customers, acting as a trusted advisor on cybersecurity technologies.
• Provide technical consultation and guidance throughout the sales cycle.
• Work with product management and engineering teams to stay updated on product capabilities and roadmap.
• Deliver internal enablement sessions to sales and technical teams.
• Stay current with industry trends, emerging threats, and competitive landscape.
• Provide feedback to product teams based on customer insights and market demands.
• Bachelor s degree in Computer Science, Information Security, or related field.
• 3+ years of experience in cybersecurity presales or technical consulting.
• Strong hands-on experience with Palo Alto Networks, Fortinet, and Cisco security products..
• Relevant certifications such as PCNSE, NSE4/NSE5/NSE7, CCNP Security, or CCIE Security are highly desirable..
• Excellent communication, presentation, and interpersonal skills.
• Ability to work independently and collaboratively in a fast-paced environment.
• On-site Working About NTT DATA
• NTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world s leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. Our consulting and industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each year in R&D.
• Equal Opportunity Employer
• NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today.
• Third parties fraudulently posing as NTT DATA recruiters.
• NTT DATA recruiters will never ask job seekers or candidates for payment or banking information during the recruitment process, for any reason. Please remain vigilant of third parties who may attempt to impersonate NTT DATA recruiters whether in writing or by phone in order to deceptively obtain personal data or money from you. All email communications from an NTT DATA recruiter will come from an @nttdata.com email address. If you suspect any fraudulent activity, please contact us.

ประสบการณ์:

2 ปีขึ้นไป

ทักษะ:

Web Services

ประเภทงาน:

งานประจำ

• Conduct security assessments on systems, networks, and applications.
• Simulate cyber attacks to identify system vulnerabilities.
• Typical security testing activities include:Software/Web Application/Web Services penetration testing.
• Network Penetration Testing.
• Mobile Application Penetration Testing.
• Thick Client Penetration Testing.
• Develop and execute penetration testing methodologies.
• Prepare detailed reports on the findings of penetration tests.
• Recommend and implement improvements to security policies.
• Stay updated with the latest penetration testing tools and techniques.
• Train staff on security awareness and procedures.
• Collaborate with IT staff to improve system security.
• Your role as a leader: At Deloitte, we believe in the importance of empowering our people to be leaders at all levels. We expect our people to embrace and live our purpose and shared values, challenging themselves every day to identify issues that are most important to our clients, our people and the communities, and to make an impact that matters. Additionally, Consultants across our Firm are expected to:Actively seek out developmental opportunities for growth, act as strong brand ambassadors for the firm as well as share their knowledge and experience with others.
• Understand the goals of our internal and external stakeholder to set personal priorities as well as align their teams work to achieve the objectives.
• Constantly challenge themselves, collaborate with others to deliver on tasks and take accountability for the results.
• Build productive relationships and communicate effectively in order to positively influence teams and other stakeholders.
• Project integrity and confidence while motivating others through team collaboration as well as recognising individual strengths, differences, and contributions.
• Requirements: If you are someone with:Bachelor's degree in information security, information systems management, computer science, engineering, or other related discipline.
• More than 2 years of experience in information technology, IT audits, or cyber security.
• Proven experience as a Penetration Tester or similar role in cybersecurity.
• Proficiency in using automated tools and manual testing techniques.
• Strong understanding of common vulnerabilities and exploits.
• Relevant certifications (e.g., CEH, OSCP, CREST) are a plus.
• Excellent problem-solving and analytical skills.
• Must be able to work under pressure and produce content to tight timelines.
• Ability to self-manage, prioritizing a variety of tasks.
• Due to volume of applications, we regret only shortlisted candidates will be notified.
• Please note that Deloitte will never reach out to you directly via messaging platforms to offer you employment opportunities or request money or your personal information. Kindly apply for roles that you are interested via this official Deloitte website.
• Requisition ID: 111103In Thailand, the services are provided by Deloitte Touche Tohmatsu Jaiyos Co., Ltd. and other related entities in Thailand ("Deloitte in Thailand"), which are affiliates of Deloitte Southeast Asia Ltd. Deloitte Southeast Asia Ltd is a member firm of Deloitte Touche Tohmatsu Limited. Deloitte in Thailand, which is within the Deloitte Network, is the entity that is providing this Website.

ประสบการณ์:

5 ปีขึ้นไป

ทักษะ:

English

ประเภทงาน:

งานประจำ

• Oversee the planning, execution, and monitoring of security-related projects.
• Coordinate with cross-functional teams to ensure successful project delivery.
• Develop project plans, schedules, and budgets, and track progress against established objectives.
• Communicate project status, risks, and issues to relevant stakeholders.
• Security Risk Management: Identify, assess, and prioritize security risks across the organization.
• Develop and implement risk mitigation strategies and controls.
• Monitor and report on the effectiveness of risk management activities.
• Collaborate with stakeholders to ensure a consistent approach to risk management across the organization.
• Establishment of Policies, Standards, and Procedures:Develop, review, and maintain security policies, standards, and procedures.
• Ensure alignment with regulatory requirements and industry best practices.
• Collaborate with stakeholders to promote the adoption and enforcement of security policies and standards.
• Provide guidance and support to the organization in the interpretation and implementation of security policies and procedures.
• Communication and Collaboration with Technology Team:Effectively communicate security issues and concerns to the technology team.
• Collaborate with the technology team to develop and implement solutions to address identified security issues.
• Provide ongoing support and guidance to the technology team regarding security best practices and risk mitigation.
• Foster a strong working relationship between the security governance function and the technology team to promote a culture of security awareness and collaboration.
• Essential Skills & PrerequisitesA positive, can-do attitude, who naturally expresses a high degree of empathy to others.
• Bachelor s degree in Information Security, Computer Science, or a related field.
• A minimum of 5 years of experience in information security, with a focus on security governance.
• Professional certifications such as CISSP, CISM, or CRISC are preferred.
• Strong understanding of information security principles, frameworks, and best practices.
• Experience in audit management, risk assessment, and policy development.
• Excellent project management and organizational skills.
• Strong communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams and communicate complex security issues in a clear and concise manner.
• Demonstrated ability to work independently and deliver results under tight deadlines.
• Talent to identify and create a broad vision for a security solution and to execute it.
• Systems Thinking - the ability to see how parts interact with the whole (big picture thinking).
• Proven experience of acting as the expert in project teams. PERSONAL SKILLS: Ability to explain your thoughts or findings also to non- technical professionals.
• Good command in written and spoken Thai and English language.
• Why Ascend Money?Contribute to a safer digital world.
• Gain hands-on experience with cutting-edge cybersecurity challenges.
• Grow your career in a dynamic, fast-moving environment.
• Don t miss this opportunity to be part of something big! Apply now and take the next step with Ascend Money.
• Apply Now: CLICK

ประสบการณ์:

2 ปีขึ้นไป

ทักษะ:

Risk Management, Microsoft Office

ประเภทงาน:

งานประจำ

• Serve as the main point of contact for gathering evidence, CCTV footage, and relevant information for assigned fraud cases.
• Coordinate with other relevant teams to prepare for interrogation sessions.
• Participate in the interrogation sessions of offenders,witnesses, and/or other relevant parties.
• Draft investigation reports.
• Act as a CCTV real-time monitor as requested or assigned by the supervisor.
• Participate in security-related projects and tasks as assigned.
• Requirements: Bachelor's degree in Laws, Political Science or related field. (Fresh Graduate is welcome.).
• Availability to work in the office 5 days a week and 1 day from home.
• Minimum of 0-2 years of experience in Fraud Investigation, Fraud Prevention, Loss Prevention, Government Affairs, Government Relations, or Risk Management-related positions.
• Experience in the logistics industry is a plus.
• Previous experience as a Police/Military Official or other government official is advantageous.
• Familiarity with reviewing CCTV footage.
• Skills in offender interrogation or interviewing.
• Strong analytical and problem-solving abilities.
• Excellent interpersonal skills.
• Proficient in GSuite or Microsoft Office.
• Must have a private vehicle and a valid driver's license.
• Availability to be on-call for emergency issues.

ประสบการณ์:

3 ปีขึ้นไป

ทักษะ:

Risk Management, Big Data, Teamwork, English

ประเภทงาน:

งานประจำ

• Providing effective 2nd line of defense on oversight of Technology related risk involving in assessing, in depth, the risks in IT Infrastructure, Cloud strategy, Data Management, IT Outsourcing, IT Operations, and Big Data.
• Assisting to update Ascend Money/True Money s risk appetite for approval by the board.
• Facilitating Risk and Control Self-Assessment (R&CSA) and monitoring the design and testing the operational effectiveness under Key Control Testing (KCT) and incident m ...
• Coordinating and supporting the Country Risk Management team for facilitating Risk and Control Self-Assessment (R&CSA), performing Key Control Testing (KCT), setting and reviewing Key Risk Indicators (KRIs) and Incident Management.
• Challenge business units in implementing a secured architecture aligned with the business goals and future plans, including company policy and regulatory requirements.
• Analysing IT incidents reported by staff and report lessons learned to the Head of International Risk and Fraud Management and the Committee.
• Delivering the oversight, advisory and guidance on new technology risk and emerging risk.
• Investigation, root-cause analysis, and coordination with relevant parties for data loss prevention monitoring and management.
• Assisting the Head of International Risk and Fraud Management to bring together a holistic picture of the technology risk across the company.
• Tracking progress status with the Country Risk Management team around remediation activities to close gaps from policy compliance assessments and various other risk assessments.
• Providing IT & Cyber Risk dashboard for Committee and Senior Management.
• Ad-hoc assignment.
• Bachelor s or Master s Degree in Economic, Finance, IT or related fields.
• Minimum 3 years of professional experience in the IT Risk Management, IT Security or IT Audit with relevant experience in the Financial Services Industry.
• Strong organization, good presentation, communication, writing, interpersonal and teamwork skills.
• Demonstrated ability to complete assigned projects in a timely manner and in a fast-paced, high pressure environment.
• Multiple industry recognized certifications like CISSP, CRISC, CSSP (Cloud), CPT, ISO27001 is a plus.
• Strong analytical and quantitative skills.
• Thorough knowledge of IT governance and control frameworks.
• Understanding of complex IT environments including legacy, hybrid cloud, virtualization, software defined networking is a plus.
• Good command in both oral and written in English communication.
• Able to travel in regional countries (i.e. Myanmar, Vietnam, Cambodia, Indonesia, Malaysia, the Philippines).

ประสบการณ์:

5 ปีขึ้นไป

ทักษะ:

Problem Solving, English

ประเภทงาน:

งานประจำ

• Design, implement and maintain the IT Security of the organization which involves developing and executing security strategies, standards and procedures to protect IT assets from cyber threats and vulnerabilities.
• Develops solution conceptual designs and solution blueprints for IT projects.
• Design security architecture elements to mitigate emerging threats.
• Reviewing security measures and recommending to implementing enhancements.
• Review and advise security solution architect for the proposed system such as: Network Segmentation, Application protection, Defense-in-depth, Remote Access, Encryption Technologies.
• Conducting security advisory consultancy and working with RED and BLUE team for security testing along the pipeline of the system delivery.
• Essential Skills & PrerequisitesBachelors or Masters Degree in Computer Engineering, Computer Science or related field.
• At least 5 years of experience of IT Security Advisory, Penetration tester or Enterprise Architect or related role.
• Comprehensive understanding of the IT Security Concept, Security Architect, Risk assessment.
• Ability to analyst finding form Offensive and Defensive Security team.
• Ability to analyze end-to-end security processes and provide advice in order to reduce risk to acceptable levels.
• Strong analytical and problem solving.
• Rapid learning capability and able to work under pressure.
• Good command in written and spoken Thai and English language.
• Ability to present technical solutions with stakeholders in an easy way.
• Knowledge of International Security frameworks, Standards, and Guidelines e.g., NIST-800-53, PCI-DSS, OWASP, and etc.
• Professional Certificated related to work e.g. (CISSP, CSSLP, CDPSE, OSCP, TOGAF) is desirable.
• Why Ascend Money?Contribute to a safer digital world.
• Gain hands-on experience with cutting-edge cybersecurity challenges.
• Grow your career in a dynamic, fast-moving environment.
• Don t miss this opportunity to be part of something big! Apply now and take the next step with Ascend Money.
• Apply Now: CLICK

ประสบการณ์:

5 ปีขึ้นไป

ทักษะ:

Problem Solving, English

ประเภทงาน:

งานประจำ

• Design, implement and maintain the IT Security of the organization which involves developing and executing security strategies, standards and procedures to protect IT assets from cyber threats and vulnerabilities.
• Develops solution conceptual designs and solution blueprints for IT projects.
• Design security architecture elements to mitigate emerging threats.
• Reviewing security measures and recommending to implementing enhancements.
• Review and advise security solution architect for the proposed system such as: Network Segmentation, Application protection, Defense-in-depth, Remote Access, Encryption Technologies.
• Conducting security advisory consultancy and working with RED and BLUE team for security testing along the pipeline of the system delivery.
• Bachelors or Masters Degree in Computer Engineering, Computer Science or related field.
• At least 5 years of experience of IT Security Advisory, Penetration tester or Enterprise Architect or related role.
• Comprehensive understanding of the IT Security Concept, Security Architect, Risk assessment.
• Ability to analyst finding form Offensive and Defensive Security team.
• Ability to analyze end-to-end security processes and provide advice in order to reduce risk to acceptable levels.
• Strong analytical and problem solving.
• Rapid learning capability and able to work under pressure.
• Good command in written and spoken Thai and English language.
• Ability to present technical solutions with stakeholders in an easy way.
• Knowledge of International Security frameworks, Standards, and Guidelines e.g., NIST-800-53, PCI-DSS, OWASP, and etc.
• Professional Certificated related to work e.g. (CISSP, CSSLP, CDPSE, OSCP, TOGAF) is desirable.
• Location: True Digital Park, Punnawithi.

ประสบการณ์:

5 ปีขึ้นไป

ทักษะ:

Linux, Good Communication Skills, English

ประเภทงาน:

งานประจำ

• Conduct advanced penetration tests to identify vulnerabilities in computer systems, networks, and applications.
• Perform vulnerability assessments and security audits to evaluate the effectiveness of existing security measures.
• Develop and execute simulated cyber attacks to assess the organization s readiness to defend against real-world threats.
• Employ various attack methodologies to test the resilience of systems against hacking attempts and security breaches.
• Perform threat modeling to anticipate potential attack vectors.
• Analyze risks associated with identified vulnerabilities and recommend appropriate mitigation strategies.
• Develop custom tools and scripts to automate penetration testing and exploit known vulnerabilities.
• Keep up-to-date with the latest exploitation techniques and security tools.
• Prepare detailed reports on findings from penetration tests and security assessments.
• Document and present risks and vulnerabilities to relevant stakeholders, along with recommended countermeasures.
• Collaborate with the Blue Team to enhance the organization s defensive strategies based on offensive findings.
• Share insights and knowledge on emerging threats and attack techniques with the cybersecurity team to continually improve defensive measures.
• Essential Skills & PrerequisitesBachelors or Masters Degree in Computer Engineering, Computer Science or related field.
• At least 5 years of experience in penetration testing and vulnerability assessments or related roles.
• Strong knowledge of network and application security, ethical hacking, and cybersecurity principles.
• Familiarity with penetration testing tools (e.g., Metasploit, Burp Suite, Kali Linux).
• Excellent problem-solving skills and ability to think like an adversary.
• Good communication skills for effective reporting and stakeholder engagement.
• Rapid learning capability and able to work under pressure.
• Good command in written and spoken Thai and English language.
• Ability to present technical solutions with stakeholders in an easy way.
• Knowledge of International Security frameworks, Standards, and Guidelines e.g., NIST-800-53, PCI-DSS, OWASP, and etc.
• Professional Certificated related to work e.g. (CISSP, OSCP, OSWE) is desirable.
• Why Ascend Money?Contribute to a safer digital world.
• Gain hands-on experience with cutting-edge cybersecurity challenges.
• Grow your career in a dynamic, fast-moving environment.
• Don t miss this opportunity to be part of something big! Apply now and take the next step with Ascend Money.
• Apply Now: CLICK

ประสบการณ์:

5 ปีขึ้นไป

ทักษะ:

English

ประเภทงาน:

งานประจำ

• Oversee the planning, execution, and monitoring of security-related projects.
• Coordinate with cross-functional teams to ensure successful project delivery.
• Develop project plans, schedules, and budgets, and track progress against established objectives.
• Communicate project status, risks, and issues to relevant stakeholders.
• Identify, assess, and prioritize security risks across the organization.
• Develop and implement risk mitigation strategies and controls.
• Monitor and report on the effectiveness of risk management activities.
• Collaborate with stakeholders to ensure a consistent approach to risk management across the organization.
• Develop, review, and maintain security policies, standards, and procedures.
• Ensure alignment with regulatory requirements and industry best practices.
• Collaborate with stakeholders to promote the adoption and enforcement of security policies and standards.
• Provide guidance and support to the organization in the interpretation and implementation of security policies and procedures.
• Effectively communicate security issues and concerns to the technology team.
• Collaborate with the technology team to develop and implement solutions to address identified security issues.
• Provide ongoing support and guidance to the technology team regarding security best practices and risk mitigation.
• Foster a strong working relationship between the security governance function and the technology team to promote a culture of security awareness and collaboration.
• Positive, can-do attitude, who naturally expresses a high degree of empathy to others.
• Bachelor s degree in Information Security, Computer Science, or a related field.
• A minimum of 5 years of experience in information security, with a focus on security governance.
• Professional certifications such as CISSP, CISM, or CRISC are preferred.
• Strong understanding of information security principles, frameworks, and best practices.
• Experience in audit management, risk assessment, and policy development.
• Excellent project management and organizational skills.
• Strong communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams and communicate complex security issues in a clear and concise manner.
• Demonstrated ability to work independently and deliver results under tight deadlines.
• Talent to identify and create a broad vision for a security solution and to execute it.
• Systems Thinking - the ability to see how parts interact with the whole (big picture thinking).
• Proven experience of acting as an expert in project teams.
• Ability to explain your thoughts or findings also to non- technical professionals.
• Good command in written and spoken Thai and English language.
• Location: True Digital Park, Punnawithi.

ประสบการณ์:

5 ปีขึ้นไป

ทักษะ:

ISO 27001, Legal, Finance

ประเภทงาน:

งานประจำ

• Design and implement a cybersecurity strategy that aligns with the organization's overall business objectives.
• Conduct regular security risk assessments, vulnerability assessments, and penetration testing to evaluate the organization s cyber defenses; subsequently, develop and implement security risk mitigation strategies and programs.
• Lead and coordinate response efforts in the event of security incidents, overseeing investigation, mitigation, and post-incident analysis.
• Compliance & Regulatory ManagementEnsure adherence to relevant laws, regulations, and standards (e.g., PDPA).
• Implement and lead initiatives for security and compliance audit certifications, including ISO 27001, NIST, the Cyber Resilience Assessment Framework (C-RAF), and other applicable standards and best practices.
• Recommend, implement, and manage continuous monitoring of IT security systems and tools.
• Collaborate with legal and data protection teams to establish policies and safeguards for sensitive and personal data.
• IT GovernanceEstablish and maintain an IT governance framework, policies, and processes that align with the organization s business goals while ensuring compliance with legal, regulatory, corporate, and industry requirements.
• Work in partnership with management, legal, finance, and external auditors to promote transparency and alignment in governance practices.
• Generate and present reports on IT governance performance, compliance status, and the risk landscape to stakeholders.
• Data GovernanceDevelop and implement data governance policies that ensure data quality, security, and compliance.
• Manage the data lifecycle, align data strategies with business objectives, and collaborate with cross-functional teams to enhance data integrity.
• Oversee data stewardship, regulatory compliance, and provide best practices for data management to support effective decision-making.
• Team Leadership and DevelopmentLead and mentor a small team of IT governance, compliance, and security professionals.
• Foster a culture of continuous improvement and knowledge sharing within the team and across business units.
• Requirements:Bachelor s or Master s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• A minimum of 5 years of experience in IT governance, cybersecurity, and compliance, with at least 2 years in a managerial role.
• Strong understanding of IT governance frameworks (e.g., ITIL, COBIT), cybersecurity standards (e.g., ISO 27001, NIST), and regulatory requirements (e.g., PDPA).
• Possession of basic IT governance and cybersecurity certifications (e.g., CISSP, CISM) is advantageous.
• Proficient in common technical team/project management tools (e.g., JIRA, Asana, Github). Collaborative team player with strong interpersonal skills, capable of working effectively with both internal and external teams.
• Working-level fluency in English and Thai. Proficient in English equivalent to IELTS 5.5, CEFR B2, or TOEFL 72; excellent spoken and written communication to effectively work with a global management team.
• Familiarity with local regulatory bodies (e.g., OIC, SEC, BOT) is a plus.
• Experience in the insurance industry will be an added advantage.

ประสบการณ์:

3 ปีขึ้นไป

ทักษะ:

VoIP, Research, Project Management

ประเภทงาน:

งานประจำ

• Design, deploy, and maintain the organization's IT infrastructure, including servers, networks, storage systems, VoIP, Cloud and related hardware/software.
• Monitor system performance and troubleshoot issues to ensure optimal functionality and uptime.
• Implement security measures to protect the organization's data and infrastructure from cyber threats and unauthorized access.
• Collaborate with IT Vendors and internal teams to assess infrastructure needs and develop solutions to support business objectives.
• Conduct research and evaluate emerging technologies to enhance the organization's IT infrastructure.
• Create and maintain documentation, including system configurations, procedures, and best practices.
• Provide technical support and guidance to end-users and IT staff as needed. Participate in on-call rotations and respond to infrastructure-related incidents in a timely manner.
• Qualifications: Bachelor or Master's degree in Computer Science, Computer Engineering, IT, ICT or related field.
• Minimum GPA of 2.70 for a Bachelor's degree and 3.30 for a Master's degree.
• Good command of English, with a TOEIC score of 550 or above, or English proficiency at B1 level or higher (If no test score is available, the test can be taken later).
• Proven experience as an System Engineer,Project Management, IT Operation Management or similar role, with a minimum of 3 years in IT infrastructure design and management.
• Proficiency in configuring and managing Windows/Linux servers, virtualization technologies (e.g., VMware, Hyper-V), cloud platforms (e.g., AWS, Azure) and Network Equipment (e.g., Cisco, PaloAlto, Fortinet).
• Strong understanding of networking concepts, protocols, and technologies (e.g., TCP/IP, DNS, DHCP, VPN).
• Knowledge of security best practices and experience implementing security measures (e.g., firewalls, intrusion detection/prevention systems).
• Excellent troubleshooting skills and the ability to analyze complex technical issues.
• Strong communication and interpersonal skills, with the ability to effectively collaborate with cross-functional teams.
• Organized and well-planned project management skills.
• Relevant certifications (e.g., MCSE, CCNA, AWS Certified Solutions Architect) are a plus.
• Contact: Wirakarn มัดหมี่ Karwichai
• SCG Cement and Green Solutions Business.

ประสบการณ์:

1 ปีขึ้นไป

ทักษะ:

Linux

ประเภทงาน:

งานประจำ

• ติดตั้ง กำหนดค่า ทดสอบ และบำรุงรักษาระบบปฏิบัติการ Linux/Windows รวมถึงระบบสำรองข้อมูล.
• แก้ไขแพตช์สำหรับ Linux/Windows, แพตช์ซอฟต์แวร์ และช่องโหว่ของระบบปฏิบัติการ.
• มีทักษะด้านเทคนิคเกี่ยวกับ Server, Network และระบบที่เกี่ยวข้อง เช่น Active Directory, DNS, DHCP, File Sharing, Web Application สามารถวิเคราะห์และแก้ไขข้อผิดพลาดได้.
• บำรุงรักษาบริการและเครื่องมือในที่ทำงานให้มีความพร้อมใช้งานอยู่เสมอ (อุปกรณ์ไอทีทั้งหมด, การติดตั้งซอฟต์แวร์ต่างๆ, บริการ Office365, โปรแกรมป้องกันไวรัส, IP Phone ฯลฯ).
• จัดทำและปรับปรุงรายการทรัพย์สินไอที (Hardware/Software) ให้อยู่ในสถานะปัจจุบันเสมอ.
• จัดทำ จัดเก็บ และดูแลรักษาเอกสารที่เกี่ยวข้องกับการปฏิบัติงาน ISMS และกระบวนการที่เกี่ยวข้องตามมาตรฐาน ISO/IEC27001 และ ISO/IEC27701.
• บริหารจัดการและตรวจสอบระบบโครงสร้างพื้นฐานในห้อง Data Center ให้มีความพร้อมใช้งานอยู่เสมอ.
• จัดทำรายงานประจำเดือนตามที่ได้รับมอบหมาย.
• วุฒิปริญญาตรี สาขา Computer Science, Computer Engineering หรือสาขาที่เกี่ยวข้อง.
• มีประสบการณ์อย่างน้อย 1-5 ปี ในสายงาน Systems Engineering.
• มีทักษะทางเทคนิคและประสบการณ์ด้าน Linux, Virtualization Technology, Storage, Microsoft Products.
• สามารถเรียนรู้เทคโนโลยีและเครื่องมือใหม่ๆ ได้.
• มีความตระหนักในด้านความมั่นคงปลอดภัยของข้อมูล.
• สามารถทำงานอื่นๆ ตามที่ได้รับมอบหมาย.
• ประกันสุขภาพ.
• ประกันสังคม.
• กองทุนสำรองเลี้ยงชีพ.
• เยี่ยมไข้ เยี่ยมคลอด.
• ของขวัญวันเกิดพนักงาน.
• ตรวจสุขภาพประจำปี.
• เงินช่วยเหลืองานมงคลสมรส.
• เงินช่วยเหลืองานศพ.
• การฝึกอบรมและพัฒนาพนักงาน.
• ค่าตอบแทนพิเศษ.
• โบนัสตามผลงาน / ผลประกอบการ.