IT Security GRC

**Responsibilities:

• Analyze IT projects and provide advice on IT Security requirements / Implement and maintain security controls.

• Implement security control, risk assessment framework and program that align to regulatory requirements, ensuring documented and sustainable compliance.

• Provide advisory on technology risks, security controls and Personal Data Privacy control.

• Ensure IT Risk, IT control assessment review the appropriateness of relevant risk mitigation strategies and remedial actions with follow-up and escalation.

• Analyze, design and manage the work process, as well as to supervise the process improvement in accordance with the IT Standards.

• Assessing risk and compliance against security standards such as ISO27001, PCI DSS and NIST Cyber security standards.

• Serve as security expert and control trainings when needed.

• Attend meetings with change advisory board to determine IT Security needs.

• Develop and implement security policies, standard and procedure.

Qualifications:

• Bachelor degree or higher in Computer Science or IT related fields

• Experiences in IT Security, IT Risk Management, or IT Compliance

• Knowledge of ISO27001 ,PDPA ,Compliance and regulations.

• Develop and enhance the information security management framework.

• Experience in risk management, security control, IT Governance standard : ISO27001.

• Having knowledge in banking / Financial and insurance business in advantage.

• Good communication and interpersonal skills