เงื่อนไขการค้นหา

ประเภทงาน:

งานประจำ

• Define, review, and integrate application security requirements across applications and platforms..
• Review and provide input into application security technical architecture, ensuring security considerations are embedded into final design decisions..
• Act as a security architecture lead, owning security decisions across multiple teams and workstreams..
• Collaborate with cross functional teams (architecture, development, infrastructure, and delivery) to ensure security is integrated throughout the SDLC..
• Conduct application security risk assessments, identify vulnerabilities, and recommend appropriate mitigation strategies..
• Provide solutions to cross team security challenges, addressing both technical and business risks..
• Develop and maintain application security standards, policies, and procedures..
• Stay up to date with emerging security threats, technologies, and best practices to continuously improve application security posture..
• Provide guidance, mentoring, and training to team members on application security principles and best practices..
• Act as a trusted advisor to stakeholders, providing security recommendations and influencing key architectural decisions..
• Required Skills & ExperienceStrong experience in Application Security Architecture or Application Security Lead roles..
• Expert proficiency in Application Security, including secure design, threat modeling, and vulnerability management..
• Experience performing application security assessments and translating findings into actionable remediation plans..
• Strong understanding of enterprise application architectures and system integration..
• Proven ability to work across multiple teams and influence architectural and security decisions.
• Strong analytical, problem solving, and communication skills.
• Nice to HaveExperience in enterprise or financial services environments..
• Exposure to digital transformation or large scale platform initiatives..
• Knowledge of secure integration patterns, APIs, and modern application platforms.
• Background in consulting or project based delivery environments..

ทักษะ:

Industry trends, Cloud Computing, English

ประเภทงาน:

งานประจำ

• Provide consultancy advice to business and project teams to ensure security standards and requirements are considered and implemented.
• Perform deep dive reviews focused on Cybersecurity Risk, Technology Risk, and Emerging Risk.
• Effective management of all technology risk and cybersecurity framework including technology policies and standards based on the Group's risk appetite.
• Closely monitor technology and cyber related KPIs, KRIs, KCIs and drive remediation actions as Group perspective.
• Timely update on all material technology risk and cybersecurity topics including a set of risk indicators to the relevant Group Risk Committees and forums.
• Oversight the result of control testing from subsidiaries to ensure Cybersecurity and technology controls meet internal and external compliance requirements.
• Conduct technology risk assessments: Identify and evaluate potential risks Management with the organization's technology systems, infrastructure, and processes. Assess the adequacy of controls, identify vulnerabilities, and recommend risk mitigation strategies.
• Develop and implement risk management strategies: Collaborate with stakeholders to develop comprehensive risk management strategies that align with business objectives and regulatory requirements. Implement controls and procedures to mitigate identified risks effectively.
• Monitor technology risk exposure: Continuously monitor technology systems, networks, and processes to identify emerging risks, vulnerabilities, and trends. Stay up-to-date with industry developments, emerging technologies, and regulatory changes to proactively address potential risks.
• Perform risk analysis and reporting: Analyze risk assessment findings, internal control evaluations, and audit reports to identify trends, root causes, and areas of improvement. Prepare detailed reports on risk exposure, mitigation strategies, and recommendations for management and relevant stakeholders.
• Collaborate with cross-functional teams: Work closely with IT teams, compliance officers, cybersecurity professionals, and other stakeholders to develop and implement risk management frameworks, policies, and procedures. Provide guidance and recommendations on technology-related risk management activities.
• Conduct technology risk training and awareness programs: Develop and deliver training programs to educate employees on technology risk management best practices, policies, and procedures. Raise awareness about emerging threats and provide guidance on incident response protocols.
• Assist in incident response and recovery: Support the organization in managing technology-related incidents, including data breaches, system failures, and cybersecurity threats. Coordinate response efforts, assist in recovery measures, and contribute to post-incident reviews and lessons learned.
• Stay updated on industry standards and regulations: Keep abreast of industry trends, emerging technologies, and regulatory requirements related to technology risk management. Provide recommendations on incorporating best practices into the organization's risk management framework.
• Minimum of 5 years experience in Technology and Cyber Risk.
• Bachelor s degree or above in related discipline.
• Working experience or familiar in a group public company.
• Understanding of regulatory requirements such as BOT, OIC, and SEC; industry standards such as COBIT, NIST, ISO27001, ITIL, and PCIDSS.
• Experience in one or more emerging technologies such as Artificial Intelligence, Machine Learning, Distributed Ledger Technology, Robotic Process Automation, Cloud computing.
• Excellent communication and relationship building skills; proven ability to influence senior management.
• Good command of written and spoken in English is preferable.

ประเภทงาน:

งานประจำ

• Lead and oversee Security Operations Center (SOC) activities.
• Manage and coordinate incident response processes across the organization.
• Develop and maintain incident response playbooks and procedures.
• Perform threat intelligence analysis and monitor evolving cyber threat landscapes.
• Conduct security risk analysis and recommend mitigation strategies.
• Collaborate with IT, Risk, Compliance, and Business Units to enhance cybersecurity posture.
• Provide strategic cybersecurity guidance and recommendations to management.
• Mentor and coach SOC and Incident Response team members.
• Support internal and external security audits and compliance activities..
• Bachelor s degree or higher in Cybersecurity, Information Technology, or related field.
• Minimum 7 years of experience in cybersecurity roles.
• Proven experience managing SOC or Incident Response teams.
• Strong knowledge of threat detection, incident handling, and digital forensics.
• Strong understanding of security frameworks and standards such as ISO 27001, NIST, and MITRE ATT&CK.
• Strong analytical, investigative, and problem-solving skills.
• Leadership and team management capabilities.

ทักษะ:

ISO 27001, DevOps, Swift

ประเภทงาน:

งานประจำ

• Manage end-to-end cryptographic key lifecycle (generation, distribution, rotation, backup, archival, destruction).
• Administer and operate Hardware Security Modules (HSMs), preferably Thales Luna HSM.
• Define and enforce key management policies and procedures aligned with banking regulations and industry standards (e.g., PCI DSS, ISO 27001).
• Support encryption key integration across banking applications, core systems, payment systems, and digital channels.
• Conduct key ceremonies and maintain audit logs.
• Vault & Secrets Management.
• Administer enterprise vault platforms (e.g., HashiCorp Vault or similar).
• Manage secrets lifecycle (API keys, certificates, tokens, database credentials).
• Configure access control policies, role-based access, and segregation of duties.
• Integrate vault solutions with applications, DevOps pipelines, and cloud/on-prem infrastructure.
• Monitor vault security posture and perform regular health checks.
• Security & Compliance.
• Ensure compliance with regulatory requirements (BOT, PCI DSS, SWIFT CSP, etc.).
• Perform risk assessments related to cryptographic controls.
• Support audit activities and provide evidence for internal/external auditors.
• Participate in incident response related to key compromise or vault breaches.
• Architecture & Improvement.
• Contribute to cryptographic architecture design and secure key management framework.
• Support post-quantum cryptography transition planning (if applicable).
• Recommend best practices and continuous improvements for key and secrets management.
• Apply now if you have these advantages.
• Bachelor s degree or higher in computer science/ data science or any related field.
• Minimum of 3-7 years of experience in Information Security or Cryptography (Banking Financial industries are advantage).
• 3-7+ years of experience in Information Security or Cryptography.
• Hands-on experience with HSM (Thales Luna preferred).
• Experience in Vault or Secrets Management platforms (e.g., HashiCorp Vault).
• Experience in banking or financial services environment is highly preferred..
• Strong understanding of cryptographic principles (PKI, symmetric/asymmetric encryption, TLS, key wrapping, key derivation).
• Experience with key lifecycle management processes.
• Knowledge of PKI, certificate management, and CA integration.
• Familiarity with PCI DSS encryption requirements.
• Scripting skills (e.g., Bash, Python, PowerShell) are a plus.
• Why join Krungsri?.
• As a part of MUFG (Mitsubishi UFJ Financial Group), we a truly a global bank with networks all over the world.
• We offer a striking work-life balance culture with hybrid work policies (3 days in office per week).
• Unbelievable benefits such as attractive bonuses, employee loan with special rates and many more..
• Apply now before this role is close. **.
• FB: Krungsri Career(http://bit.ly/FacebookKrungsriCareer [link removed]).
• LINE: Krungsri Career (http://bit.ly/LineKrungsriCareer [link removed]).
• Talent Acquisition Department
• Bank of Ayudhya Public Company Limited
• 1222 Rama III Rd., Bangpongpang, Yannawa, Bangkok 10120.
• หมายเหตุ ธนาคารมีความจำเป็นและจะมีขั้นตอนการตรวจสอบข้อมูลส่วนบุคคลเกี่ยวกับประวัติอาชญากรรมของผู้สมัคร ก่อนที่ผู้สมัครจะได้รับการพิจารณาเข้าร่วมงานกับธนาคารกรุงศรีฯ.
• Remark: The bank needs to and will have a process for verifying personal information related to the criminal history of applicants before they are considered for employment with the bank..
• Applicants can read the Personal Data Protection Announcement of the Bank's Human Resources Function by typing the link from the image that stated below.
• EN (https://krungsri.com/b/privacynoticeen).
• ผู้สมัครสามารถอ่านประกาศการคุ้มครองข้อมูลส่วนบุคคลส่วนงานทรัพยากรบุคคลของธนาคารได้โดยการพิมพ์ลิงค์จากรูปภาพที่ปรากฎด้านล่าง.
• ภาษาไทย (https://krungsri.com/b/privacynoticeth).

ทักษะ:

ISO 27001, Python, PowerShell

ประเภทงาน:

งานประจำ

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 5 years of experience in IT security and governance.
• Strong understanding of IT security principles, practices, and technologies.
• Knowledge of relevant security standards and regulations (e.g., ISO 27001, NIST, GDPR, HIPAA, PCI DSS).
• Experience with risk assessment and vulnerability management.
• Experience with security incident response and management.
• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills.
• Ability to work independently and as part of a team..
• Relevant certifications (e.g., CISSP, CISM, CISA, Security+).
• Experience with cloud security (AWS, Azure, GCP) and On-Premises.
• Experience with security information and event management (SIEM) systems.
• Experience with scripting languages (e.g., Python, PowerShell).
• Experience with penetration testing.
• Ability to maintain confidentiality and handle sensitive information.
• Ability to adapt to changing technologies and security threats.
• Strong attention to detail and organizational skills.
• Ability to create and maintain clear and concise documentation..
• โบนัสประจำปี.
• ลาพักร้อน เมื่อพ้นทดลองงาน.
• ลา Workcation.
• กองทุนสำรองเลี้ยงชีพ.
• ประกันสังคม / ประกันสุขภาพ / ประกันชีวิต / ประกันอุบัติเหตุ.
• วันหยุดตามกฏหมาย (ไม่น้อยกว่า 13วัน).
• ลาหยุดในเดือนเกิด.
• ตรวจสุขภาพประจำปี.
• เงินช่วยเหลือสมรส.
• สิทธิคุณพ่อลาเลี้ยงบุตร.
• เงินช่วยเหลือฌาปนกิจ.
• Co working Space.
• ฟิตเนต.
• Point แลกของรางวัล.
• บริการปรึกษานักจิตวิทยาออนไลน์..
• การเดินทาง.
• BTS: สถานีหมอชิต, ห้าแยกลาดพร้าว.
• MRT: สถานีพหลโยธิน.
• บริการเรียกรถผ่าน App MuvMi..
• ติดตามข่าวสารจาก SC ASSET ได้ที่.
• http://insidesc.scasset.com/..

ทักษะ:

Internal Audit

ประเภทงาน:

งานประจำ

• ตรวจตาม internal control ดูแลทุกหน่วยงานเกี่ยวกับระบบ Application ภาพรวมมีทั้ง Cyber security + Application control (asset control).
• ร่วมจัดทำแนวทางการตรวจสอบ (Audit Program) หน่วยรับตรวจที่รับผิดชอบและกำหนดวิธีการตรวจสอบเพื่อให้การตรวจสอบบรรลุตามวัตถุประสงค์.
• ปฏิบัติงานตรวจสอบตามที่ได้รับมอบหมายให้สอดคล้องตามแนวทางการตรวสอบที่ได้รับการเห็นชอบ และตามมาตรฐานการตรวจสอบภายใน.
• รวบรวม วิเคราะห์ ประเมินผลข้อมูลที่ได้จากการตรวจสอบ ถึงความเพียงพอและความมีประสิทธิภาพของระบบควบคุมภายใน.
• ช่วยในการตรวจสอบและประเมินระบบ IT เพื่อค้นหาปัญหาและข้อบกพร่อง พร้อมนำเสนอแนวทางในการปรับปรุงและพัฒนาระบบ IT.
• วางแผนการดําเนินการตามกระบวนการและขั้นตอนในการระบุและประเมินความเสี่ยงในระบบสารสนเทศขององค์กร.
• ปริญญาตรี ในสาขา เทคโนโลยีสารสนเทศ, วิทยาศาสตร์คอมพิวเตอร์, วิศวกรรมศาสตร์คอมพิวเตอร์, วิศวกรรมศาสตร์.
• Computer Engineer, Computer Science, Information Technology.
• มีความเข้าใจด้านเทคนิคเกี่ยวกับสภาพแวดล้อมด้านเทคโนโลยีสารสนเทศ หรือ IT Security.
• มีประสบการณ์ในการประเมิน/ตรวจสอบ ระบบเทคโนโลยีสารสนเทศหรือระบบการบริหารความเสี่ยงด้านเทคโนโลยีสารสนเทศ 2-3 ปี.
• ผ่านการฝึกอบรมด้าน IT Governance หรือ IT Best Practice หรือมาตรฐานการตรวจสอบสารสนเทศ (พิจารณาเป็นพิเศษ).
• ได้รับใบรับรองคุณวุฒิด้าน IT Audit หรือด้าน Security (พิจารณาเป็นพิเศษ)..
• วัน-เวลา ทำงาน: 8.30 - 17.00 จ-ศ.
• สถานที่ทำงาน: อาคารแสงโสม จตุจักร.

ประเภทงาน:

งานประจำ

• เราให้ความสำคัญกับพนักงานทุกคนอย่างเท่าเทียม ปลูกฝังให้ทุกคนยึดมั่นในการประกอบสัมมาชีพ อย่างมีบรรษัทภิบาลที่ดี.
• เราให้ความสำคัญต่อการพัฒนาศักยภาพพนักงานในทุกๆ ด้าน ด้วยโปรแกรมการฝึกอบรมคุณภาพให้เหมาะสมกับแต่ละคน เพื่อยกระดับการทำงานของพนักงานอย่างมืออาชีพ.
• สำนักงานใหญ่ของบางจาก ถูกออกแบบให้เป็น Smart Office and Smart Display Solution ที่มีความหรูหรา ทันสมัย และประหยัดพลังงาน.
• ความอบอุ่นแบบพี่น้อง คือหัวใจในการดูแลพนักงานใหม่ที่ก้าวเข้ามาในครอบครัวของเรา.
• ความปลอดภัยในการทำงานยังเป็นอีกหนึ่งสิ่งที่สำคัญสูงสุดของธุรกิจปิโตรเลียม ดังนั้นพนักงานบางจากทุกคนจึงต้องผ่านการอบรมตามมาตรฐานความปลอดภัยและอาชีวอนามัยอย่างเข้มข้น.
• พนักงานสบายใจได้กับโปรแกรมประกันสุขภาพ OPD/IPD และเรายังให้เงินช่วยเหลือค่ารักษาพยาบาลสำหรับบุพการี.
• Work life balance คือสิ่งสำคัญ เวลาการทำงานที่ยืนหยุ่นทำให้คุณจัดสรรเวลาได้อย่างลงตัว.

ทักษะ:

Linux

ประเภทงาน:

งานประจำ

• วุฒิการศึกษาปริญญาตรี สาขาวิศวกรรมคอมพิวเตอร์, วิทยาการคอมพิวเตอร์ หรือเทคโนโลยีสารสนเทศ.
• มีประสบการณ์ทำงานด้าน IT Support, Network Operation Center (NOC) หรือ Security Operations Center (SOC) อย่างน้อย 2 ปี.
• มีความเชี่ยวชาญในการตรวจสอบสถานะเครือข่าย (Traffic Load) และการจัดการระบบ Network เช่น VLAN, VPN, Firewall.
• มีความรู้ความเข้าใจด้าน Cyber Security และสามารถใช้เครื่องมือ SIEM (เช่น Splunk) หรือโปรแกรม Monitor อื่นๆ เพื่อเฝ้าระวังความปลอดภัยของระบบ.
• สามารถแก้ไขปัญหา Software เบื้องต้น (1st Tier Support) และประสานงานกับทีมเทคนิคเฉพาะทางหรือ Vendor ภายนอกได้อย่างมีประสิทธิภาพ.
• มีความสามารถในการดูแลจัดการ Server (Windows/Linux Server), การติดตั้ง Patch Software และการบำรุงรักษาตามแผนที่กำหนด.
• มีความเข้าใจในกระบวนการสำรองข้อมูล (Data Backup) และมีทักษะในการทดสอบการกู้คืนข้อมูล (Recovery).
• มีความละเอียดรอบคอบในการตรวจสอบและควบคุมการเข้าถึงระบบของบุคคลภายนอก.
• ดูแลและแก้ไขปัญหาการใช้งาน Software เบื้องต้น (1st Tier) ของโรงกลั่น PKN และ BSRC.
• ประสานงานกับทีม Support ในระดับถัดไป (ATD) เพื่อแก้ไขปัญหาทางเทคนิค.
• ตรวจสอบสถานะการทำงานของระบบเครือข่ายข้อมูล (Traffic Load).
• ตรวจสอบผลการสำรองข้อมูล และทดสอบการกู้คืนข้อมูล.
• ดำเนินการบำรุงรักษา Server ตามแผนทีกำหนด และแจ้งเตือนการ Update Patch ของ Software ต่างๆ.
• ตรวจสอบการเข้า-ออก ของ Licensor ที่เข้ามาปรับปรุง Application ใน Server ของโรงกลั่น.

ทักษะ:

Automation, Power BI, Tableau

ประเภทงาน:

งานประจำ

• Review major claims for fraud indicators, conduct investigations, and gather evidence for resolution including engaging key stakeholders to manage red flag and termination dialogue.
• Use analytics tools to identify patterns, anomalies, and emerging fraud risks.
• Design and maintain dashboards, generate accurate and insightful reports on fraud, trends, case outcomes, and KPIs for leadership.
• Identify inefficiencies in fraud and claims processes; propose and implement solutions leveraging Lean Six Sigma and automation.
• Ensure all investigations adhere to regulatory and internal standards.
• Partner with cross-functional teams to implement fraud prevention measures and share insights.
• Recommend process enhancements and leverage technology for efficiency.
• Explore technology, AI and automation opportunities to enhance fraud detection and reporting capabilities.
• Monitor emerging fraud trends within the insurance industry and update internal controls accordingly.
• Degree in data science, engineering, business administration or equivalent combination of education and experience.
• Data Analyst Professional certificates preferred. Power BI, Tableau Desktop Specialist, Lean Six Sigma or equivalent certification.
• Minimum 5 years data analytics experiences..

ทักษะ:

Network Infrastructure, SAP, Assurance

ประเภทงาน:

งานประจำ

• Participate in the development of IT Audit Programs within assigned areas, covering IT security, applications, and IT processes (e.g., network infrastructure, operating systems, data centers, SAP, and retail systems). Assess whether security risks and vulnerabilities are properly identified and mitigated. Coordinate audit scope and effectiveness with business units and external IT/security specialists..
• Contribute to the design of detailed audit testing procedures in alignment with the approved Audit Program, including the definition of audit scope, sample sizes, audit ...
• Execute audit assignments as assigned by supervisors, performing detailed testing in accordance with established audit methodologies and procedures..
• Review and consolidate audit results, working papers, and supporting evidence prepared by team members in order to analyze audit findings and determine whether further audit procedures or expanded testing are required..
• Evaluate and analyze audit findings, including root causes and risks, and provide recommendations for improvement. Prepare and consolidate audit reports for submission to management for review and consideration..
• Bachelor s degree or higher in Management Information Systems, Information Technology, Computer Science, or other related fields..
• At least 5 years of experience in internal auditing, with a focus on IT audit, IT security controls, or IT-related assurance functions, or other relevant experience (e.g., information security, IT risk and control, IT governance, or IT quality assurance)..
• Strong leadership skills, with the ability to work effectively as part of a team and adapt to changing work environments..
• Strong analytical and systematic thinking skills..
• Proactive and innovative mindset, with the ability to initiate improvements..
• Effective communication and coordination skills..
• Proficiency in computer applications, including MS Office and SAP ERP..
• Professional certifications such as CISA, CISSP, CISM, or other relevant technical certifications will be considered an advantage..
• Working location: The Mall Ramkhamhaeng (Headquarter).

ทักษะ:

Risk Management, Kubernetes, Docker

ประเภทงาน:

งานประจำ

• Design, develop, and maintain security systems, tools, and best practices across the stack (frontend, backend, mobile, and infrastructure).
• Identify, assess, and mitigate security vulnerabilities through proactive risk management and threat modeling.
• Collaborate with product managers and developers to embed security into the software development lifecycle (SDLC).
• Develop and enforce policies for secure coding, data protection, and incident response.
• Implement robust authentication and authorization mechanisms.
• Conduct regular security assessments, including penetration testing and code reviews.
• Monitor, detect, and respond to security incidents using advanced tools and methodologies.
• Enhance infrastructure security using Kubernetes, Docker, and cloud platforms (GCP, AWS).
• Stay current on emerging threats, vulnerabilities, and security trends, and recommend actionable insights to improve defenses.
• Champion security awareness across the organization, including training sessions and knowledge-sharing activities.
• Ensure compliance with relevant security standards and regulations such as ISO 27001, PDPA, GDPR, SOC 2, or PCI DSS.
• Basic Qualifications.
• Proven expertise in application security, cloud security, and infrastructure security.
• Proficiency in securing systems built with technologies such as Node.js, Golang, Elixir, Python, React, Svelte, or Flutter.
• Experience with tools like Docker, Kubernetes, and cloud services (GCP, AWS).
• Strong understanding of cryptographic principles and secure communication protocols.
• Familiarity with CI/CD pipelines and secure DevOps practices.
• Hands-on experience with security tools for vulnerability scanning, penetration testing, and threat detection.
• Deep understanding of database security, especially with PostgreSQL or other relational or non-relational databases.
• Strong analytical and problem-solving skills with a security-first mindset.
• Excellent communication skills and the ability to collaborate effectively in Agile teams.
• Self-motivation, adaptability, and a strong work ethic.
• Preferred Qualifications.
• Experience leading security initiatives or mentoring other engineers in security best practices.
• Expertise in compliance frameworks such as ISO 27001, PDPA, GDPR, SOC 2, or PCI DSS.
• Advanced knowledge of security monitoring and incident response systems.
• Strong system design skills with a focus on secure architectures and long-term trade-offs.
• A proven track record of securing fast-paced, high-growth tech environments.
• A passion for securing user-centric products and contributing to their success.
• Perks & Benefits.
• Flat Structure As we continue to grow fast, we strive to retain our culture where everyone is heard, contributes, and grows with the company..
• Work-life Harmony We believe that quality time outside of work is important to sustaining a healthy and happy lifestyle.
• Remote Work Hybrid-mode activated! It comes with the package: flexibility, focus and productivity!.
• Urban Office One breath from Phrom Phong BTS. No sweat whatsoever! The office should also feel like a second home so we dedicated a lot of care and resources into building the best environment for you to wake up to every morning.
• Fun Workshop The best relationships are built over new experiences, that s why we have workshops filled with a range of activities for you to look forward to and enjoy.
• Game Tournament It s getting fun and competitive! Challenge doesn t only have to come from work. Own the championship and show the peeps how great of a gamer (and player) you are.
• Group Insurance Health comes first, we know, don t worry, we ve got you covered.
• Health & Wellness Only a healthy army wins the war. We invest to take care of you from physical, mental and happiness-level. Adopted health & wellness applications plus activities to make sure everyone here is on cloud nine

ทักษะ:

ISO 14001

ประเภทงาน:

งานประจำ

• Develop and maintain Health & Safety programs in compliance with regulations and ISO 14001.
• Conduct HAZID, Risk Assessments, and Safety Audits to identify and mitigate risks.
• Ensure compliance with company policies, regulatory requirements, and access control procedures.
• Deliver H&S training and promote a strong safety culture.
• Lead emergency preparedness, response planning, and incident investigations.
• Analyze incidents, identify root causes, and implement corrective actions.
• Prepare clear safety reports, audit findings, and performance summaries.
• Manage safety programs and initiatives to ensure effectiveness and accountability.
• Job Qualifications.
• Bachelor s degree in Occupational Health & Safety, Environmental Science, Engineering, or related field.
• Experience in a safety role, preferably in corporate or financial institutions.
• Strong knowledge of Health & Safety regulations, ISO 14001, and industry best practices.
• Proven skills in risk assessment, safety audits, incident investigation, and report writing.
• Experience in emergency management, H&S training, and program management.
• Knowledge of access control systems and security principles.
• High accountability, ethical standards, and strong stakeholder management skills.
• We're committed to bringing passion and customer focus to the business. If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us.

ประเภทงาน:

งานประจำ

• Develop, implement, and enforce robust Security Policies and procedures to protect company assets, employees, and customers.
• Manage and optimize Access Control (AC) systems across all bank premises.
• Lead Incident Response efforts, including investigation, resolution, and reporting of security breaches or emergencies.
• Conduct regular Threat Assessment to identify potential security vulnerabilities and develop mitigation strategies.
• Ensure full Regulatory Compliance with all relevant security laws, regulations, and industry standards, including Regulatory Compliance Management.
• Oversee and manage the bank's Security Operations, including surveillance, patrols, and security personnel deployment.
• Implement and maintain effective Risk Management strategies to identify, assess, and mitigate security risks.
• Plan and execute Emergency Management protocols, including drills and crisis communication.
• Conduct Investigative Skills for security incidents, thefts, and other breaches.
• Develop and deliver comprehensive Security Trainings for all employees, including Health And Safety (H&S) Training.
• Evaluate and implement new Security Technologies to enhance the bank's security posture.
• Demonstrate strong Accountability for the overall security performance and outcomes of the bank.
• Job Qualifications Proven experience in a senior security management role, preferably within the financial services industry.
• Extensive knowledge and practical experience in Access Control (AC) systems.
• Demonstrated ability in Incident Response and crisis management.
• Strong understanding of Regulatory Compliance and Regulatory Compliance Management frameworks.
• Expertise in Risk Management methodologies and threat assessment.
• Proficiency in Security Operations and policy enforcement.
• Excellent Investigative Skills with a keen eye for detail.
• Experience in developing and delivering Security Trainings, including Health And Safety (H&S) Training.
• Familiarity with various Security Technologies and their application.
• Strong leadership, communication, and interpersonal skills.
• High level of Accountability and integrity.
• We're committed to bringing passion and customer focus to the business. If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us.

ทักษะ:

Compliance

ประเภทงาน:

งานประจำ

• Validates, classifies, priorities and opens ticket.
• Acting as focal contact point for report security incidents.
• Document and escalate incidents (including event's history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment.
• Provide daily summary reports of security incidents.
• Responds to security alerts generate within the SLA time window.
• Follow-up and tracking security incidents base on team process.
• Examine network topologies to understand data flows through the network.
• Validate security incidents alerts against network traffic using packet analysis tools.
• Isolate or remove malware.
• Identify applications and operating systems of a network device based on network traffic.
• Assist in the construction of signatures which can be implemented on cyber defense network tools in response to new or observed threats within the network environment or enclave.
• Notify cybersecurity service provider team members of suspected cyber incidents, status, and potential impact for further action in accordance with the organization's cyber incident response plan.
• Work with stakeholders to resolve computer security incidents and vulnerability compliance.
• Who are we looking for?.
• Knowledge of computer networking concepts and protocols, and network security methodologies.
• Analytical and problem-solving skills are required.
• Knowledge of network traffic analysis methods.
• Knowledge of cyber defense and information security policies, procedures, and regulations.
• Experience in IT Security, Network Security or Security Compliance.
• Knowledge of common security tools such as anti-virus, firewall and intrusion detection system.
• Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services. Able to work in shift.
• Location: Head Office: Chatuchak, SJ Infinite One Business Complex

ทักษะ:

Teamwork, Compliance, Problem Solving

ประเภทงาน:

งานประจำ

• IT Solutions & Services.
• Work with Passion, Professional and Teamwork.
• Grow up in Career path.
• We are looking for talented Cyber Security Engineer to find the most efficient way to create and to manage every cyber security solution for multiple clients.
• What we want?.
• To propose improvement to infrastructure and security systems and may present them to customer s upper management.
• Plan and carry out a customer s information security strategy to be the healthy security architectures for any IT project.
• To implement security system and ensure compliance with corporate cyber security policies and procedures.
• To provide professional supervision and guidance to security teams.
• Works with other business units, partners, and customers to maintain secure methods of security management.
• Who are we looking for?.
• Experience in IT infrastructure or Cyber Security field.
• Great awareness of Cyber Security trends and new technology update.
• Knowledge in Security Management is advantage. Excellent knowledge in Security Product (Antivirus/Firewall/VPN, IPS/IDS), Security Platform, Endpoint Solution, and Network Security solution is a plus.
• Excellent problem solving and analytical skill, planning and organizing skill and customer oriented.
• Security Profession Certification is a plus.
• Knowledge in AI and the ability to use AI-related tools and technologies.
• MFEC OKR:- As MFEC People, you will be a part of our talent team. Besides your main responsibilities, you do have special projects as part of OKR. However, the percentages will be different according to the positions and teams.
• Location: Branch: Chatuchak

ทักษะ:

Teamwork, Compliance, Problem Solving, English

ประเภทงาน:

งานประจำ

• IT Solutions & Services.
• Work with Passion, Professional and Teamwork.
• Work in Shift.
• We are looking for a highly proficient Cyber Security Consultant who has the professional knowledge and skill to drive and enhance our security solutions in any field at MFEC Cyber Security Operation Center (CSOC) for our large enterprise customers.
• What we want?.
• To find the most efficient way to create and to manage every cyber security solution for multiple clients.
• To propose improvement to infrastructure and security systems and may present them to customer s upper management.
• Plan and carry out a customer s information security strategy to be the healthy security architectures for any IT project.
• To implement security system and ensure compliance with corporate cyber security policies and procedures.
• To provide professional supervision and guidance to security teams.
• Works with other business units, partners, and customers to maintain secure methods of security management.
• Work in Shift.
• Who are we looking for?.
• 1-3 Years or experience in Cyber Security field.
• Great awareness of Cyber Security trends and new technology update.
• Strong knowledge and experience with various IT security such as Incident Handler, Forensic Examiner, Forensic Analyst is a plus.
• Excellent knowledge in Security Product (Firewall/VPN, IPS/IDS), Security Platform, Endpoint Solution, and Network Security solution.
• Excellent problem solving and analytical skill, planning and organizing skill and customer oriented.
• Proficiency in English both written and spoken.
• Security Profession Certification is a plus.
• Knowledge in AI and the ability to use AI-related tools and technologies.
• MFEC OKR:- As MFEC People, you will be a part of our talent team. Besides your main responsibilities, you do have special projects as part of OKR. However, the percentages will be different according to the positions and teams.
• Location: Branch: Chatuchak, Lao Peng Nguan Building

ทักษะ:

Contracts, Network Administration, Project Management

ประเภทงาน:

งานประจำ

• Designs and plans network solutions, including LAN, WAN, data center, and cloud networks.
• Develops network architectures that meet the organization's current and future requirements.
• Configures, deploys, and manages network devices such as routers, switches, firewalls, load balancers, and wireless controllers.
• Implements and maintains network services and protocols.
• Implements and enforces network security measures, including firewalls, intrusion detection/prevention systems, access controls, and VPNs.
• Diagnoses and resolves complex network issues, utilizing advanced troubleshooting techniques and network monitoring tools.
• Analyzes network performance data to identify and address bottlenecks and irregularities.
• Optimizes network performance by analyzing traffic patterns, adjusting configurations, and implementing quality of service (QoS) measures.
• Creates and maintains comprehensive network documentation, including network diagrams, configurations, standard operating procedures, and incident reports.
• Collaborates with cross-functional teams, including systems administrators, security teams, application developers, and business stakeholders.
• Manages/participates in network-related projects, including network upgrades, migrations, and expansions.
• Develops project plans, define objectives, and ensure successful project execution.
• Stays updated with emerging networking technologies and industry trend.
• Works with vendors to evaluate, procure, and manage networking equipment, services, and support contracts.
• Utilizes network monitoring and analysis tools to proactively monitor network health, identify issues, and respond to incidents.
• Erforms any other related task as required.
• To thrive in this role, you need to have: Seasoned understanding of networking concepts, protocols, architectures, and services.
• Seasoned proficiency in configuring and managing network devices such as routers, switches, firewalls, load balancers, and wireless controllers.
• Seasoned knowledge of network protocols and technologies such as BGP, OSPF, VLANs, VPNs, QoS, and security protocols.
• Seasoned experience with network monitoring and analysis tools.
• Strong documentation and communication skills to convey technical information effectively.
• Seasoned proficiency in network administration and configuration tools.
• Analytical problem-solving skills to diagnose and resolve complex network issues.
• Strong project management skills to lead and contribute to network projects.
• Seasoned familiarity with network security principles and best practices.
• Academic qualifications and certifications: Bachelor's degree or equivalent in Information Technology, Computer Science, or a related field.
• Network Administration certification (Azure, Google, Amazon) preferred.
• Relevant certifications such as CompTIA Network+, Cisco Certified Network Associate (CCNA), or Juniper Networks Certified Associate (JNCIA) are beneficial.
• Relevant certifications such as Cisco Certified Internetwork Expert (CCIE), Juniper Networks Certified Internet Expert (JNCIE), or equivalent certifications are preferred.
• Required experience: Seasoned relevant experience in network engineering or a related role.
• Seasoned experience working in a networking environment.
• Seasoned experience with network security.
• Seasoned WAN and LAN experience.
• Seasoned experience in wireless equipment, protocols, standards, and wireless LAN design.
• Seasoned experience with cloud networking (AWS, Azure, etc.).
• Hybrid Working About NTT DATA
• NTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world s leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. Our consulting and industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each year in R&D.
• Equal Opportunity Employer
• NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today.
• Third parties fraudulently posing as NTT DATA recruiters.
• NTT DATA recruiters will never ask job seekers or candidates for payment or banking information during the recruitment process, for any reason. Please remain vigilant of third parties who may attempt to impersonate NTT DATA recruiters whether in writing or by phone in order to deceptively obtain personal data or money from you. All email communications from an NTT DATA recruiter will come from an @nttdata.com email address. If you suspect any fraudulent activity, please contact us.

ประเภทงาน:

งานประจำ

• Design and implement Azure-based cloud architectures aligned with business and technical requirements.
• Define and maintain CI/CD pipelines to ensure efficient and reliable deployments.
• Develop and manage infrastructure using Terraform (Infrastructure as Code).
• Architect, deploy, and manage Kubernetes environments.
• Integrate Security Operations (SecOps) best practices into cloud solutions.
• Ensure cloud environments meet scalability, performance, and security standards.
• Collaborate with development, DevOps, and cybersecurity teams.
• Provide technical guidance and support during cloud transformation initiatives.
• ABOUT YOU
• Proven experience as a Cloud Architect or Senior Cloud Engineer.
• Strong expertise in Microsoft Azure architecture and services.
• Hands-on experience with CI/CD pipelines and DevOps practices.
• Solid knowledge of Terraform and infrastructure automation.
• Experience with Kubernetes and container orchestration.
• Understanding of SecOps and cloud security best practices.
• Strong analytical and problem-solving skills.
• Professional proficiency in English is a plus.
• Ability to work in an international and multicultural environment.
• WHY AMARIS?
• Global Diversity: Be part of an international team of 110+ nationalities, celebrating diverse perspectives and collaboration.
• Trust and Growth: With 70% of our leaders starting at entry-level, we're committed to nurturing talent and empowering you to reach new heights.
• Continuous Learning: Unlock your full potential with our internal Academy and over 250 training modules designed for your professional growth.
• Vibrant Culture: Enjoy a workplace where energy, fun, and camaraderie come together through afterworks, networking events, and more.
• Meaningful Impact: Join us in making a difference through our CSR initiatives, including the WeCare Together program, and be part of something bigger.
• Equal Opportunity
• Amaris Consulting is proud to be an equal opportunity workplace. We are committed to promoting diversity within the workforce and creating an inclusive working environment. For this purpose, we welcome applications from all qualified candidates regardless of gender, sexual orientation, race, ethnicity, beliefs, age, marital status, disability, or other characteristics.
• Who are we?
• Amaris Consulting is an independent technology consulting firm providing guidance and solutions to businesses. With more than 1000 clients across the globe, we have been rolling out solutions in major projects for over a decade - this is made possible by an international team of 7,600 people spread across 5 continents and more than 60 countries. Our solutions focus on four different Business Lines: Information System & Digital, Telecom, Life Sciences and Engineering. We're focused on building and nurturing a top talent community where all our team members can achieve their full potential. Amaris is your steppingstone to cross rivers of change, meet challenges and achieve all your projects with success.
• Brief Call: Our process typically begins with a brief virtual/phone conversation to get to know you! The objective? Learn about you, understand your motivations, and make sure we have the right job for you!
• Interviews (the average number of interviews is 3 - the number may vary depending on the level of seniority required for the position). During the interviews, you will meet people from our team: your line manager of course, but also other people related to your future role. We will talk in depth about you, your experience, and skills, but also about the position and what will be expected of you. Of course, you will also get to know Amaris: our culture, our roots, our teams, and your career opportunities!
• Case study: Depending on the position, we may ask you to take a test. This could be a role play, a technical assessment, a problem-solving scenario, etc.
• As you know, every person is different and so is every role in a company. That is why we have to adapt accordingly, and the process may differ slightly at times. However, please know that we always put ourselves in the candidate's shoes to ensure they have the best possible experience.
• We look forward to meeting you!