IT Security Compliance Specialist

หน้าที่และความรับผิดชอบ

• Main Activities / Tasks: Manufacturing / Data Center Security Operations, Governance, Risk & Compliance : • Ensure pro-actively oversight of Project Security Compliance of all Information Systems, DC Operations & all Customer Data Protection. • Ensure Regular vulnerability assessment, reporting, and coordinate with IT security engineer to plan and implement remedial measures. • Take proactive measures and ensure the confidentiality, integrity, availability of information assets. • Review policies, coordinate to ensure IT Security engineering team to implement firewall, IDS, IPS, SIEM, Antivirus and WAF and ensure the DC and branch offices operations security compliance. • Review execution plans and ensure IT Security engineering team implements the security hardening for IT Assets, signature updates of all security systems, regular patch management for information systems, key management renewal procedures. • Assurance of Log integrity, ensure log review and log management by relevant parties. • Ensure Oversight of SOC & DC IT Security Operations and compliance. • Investigate breach of security and advice on procedures for remediation & improvements to prevent re-occurrence. • Lead security incidents, investigation and problem management. • Review and validation of documentation of IT security operations • Ensure secure network communication to branches, and external agencies. • Plan and coordinate preventive maintenance of security systems. • Support internal and external security audit related activities, including audit preparation, coordination and support. • Any other special projects as specified, as and when required. Knowledge and skills • Good knowledge of IT security operations, Defense in depth approach to security. • Good hands on data center security technologies, Firewall, WAF, IDS, IPS, SIEM, and antivirus and access control systems. • Good hand on in enterprise IT security products. • Hand-on experience for Pen Test & Vulnerability Scans / Management preferred. • Experience with ISO 27001 requirements and audit preferred. • Familiar with security tools, , vulnerability assessment, Patch management tools • Good knowledge in Public Key infrastructure, Cryptography (symmetric and asymmetric) • Change control procedure, Disaster recovery procedure, backup and restore procedure. • Windows group policy, system hardening, and security benchmarks. • Familiar and some experience with Linux, windows, Hypervisors, Authentication protocol, Kerberos, 802.1X, Active directory, TCP/IP Protocol stack, IPSEC, CISCO, Palo Alto, and Fortinet security solution. • Third party vendor management, escalation and incident management, datacenter operation documentations, SOP.

คุณสมบัติ

คุณสมบัติด้านความรู้และความสามารถ

• ไม่ระบุ

สวัสดิการ

• สิทธิการเบิกค่าทันตกรรม
• ทำงานสัปดาห์ละ 5 วัน
• ประกันสุขภาพ
• ประกันชีวิต
• เงินโบนัสตามผลงาน
• ประกันสังคม
• สิทธิการเบิกค่าทันตกรรม

สนใจสมัครงานตำแหน่งงานนี้กรุณาติดต่อ

การเดินทาง

ไม่มี

ไม่มี

ไม่มี

ไม่มี

ไม่มี

การเดินทางเพิ่มเติม : ไม่ระบุ