Department Manager - Governance, Risk & Compliance
On-siteSuan Luang, Bangkok, Thailand
Job Summary
Interpret requirements across relevant IT Risk frameworks and map overlapping Technology policies and standards. Conduct Technology Risk Management by identifying risk areas, providing recommendations on security compliance and IT governance best practices, and authoring policies and procedures around security, data governance, and risk. Design, configure, and operate core security technologies including Antivirus, EDR, DLP, and Vulnerability Assessment tools. Oversee the Vulnerability and Penetration Management Program, prioritizing remediation and recommending mitigation solutions. Build and coordinate security awareness training programs for Thailand and Malaysia, while coordinating with internal and external audit teams to manage audit requests and status updates. Drive continuous process improvement using KPIs, KRIs, and metrics. Serve as the primary point of contact for Malaysia to ensure security requirements align with policies and standards.
Required Qualifications
- 5+ years working in IT filed with a focus on information security or IT audit
- Knowledge of ISO27001, PCIDSS and IT security control
- Exceptional communication, problem solving and cross-group collaboration skills
- Good command of written and spoken English
- Ability to present ideas in business-friendly and user-friendly language
- Ability to prioritize, track and manage a large number of divergent tasks and action items
- Ability to influence in a team-oriented, collaborative environment
- Strong ability to analyze user requirements, make recommendations and implement solution
- Strong oral and written communication skills
- Strong presentation and interpersonal skills
- Ability to prioritize and execute in high-pressured environment
- Understanding of information security principles and best practice (e.g., ISO27001, PCIDSS, OWASP and GDPR/PDPA)
- Ability to present security topics to a non-technical audience and presenting the business value of security
- Good interpersonal skills with the ability to build and influence teams; and self-motivated
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.