Governance / Security Lead-ish

หน้าที่และความรับผิดชอบ

• Focusing primarily on IT Audit, Risk & Compliance (Governance) and overarching security leadership.
• IT Audit & Risk Management: Conduct comprehensive internal IT audits, risk assessments, and gap analyses on technological processes and data management practices.
• Compliance Oversight: Ensure full compliance with legal regulations (PDPA, GDPR) and international security frameworks (ISO 27001, NIST, PCI-DSS) across all platforms.
• Policy & Governance Development: Design, enforce, and maintain IT security policies, procedures, and disaster recovery (DR) protocols across the organization.
• High-Stakes Audit Management: Act as the key lead in driving and managing high-stakes organizational compliance audits.
• Oversee vulnerability management and provide detailed remediation reports, technical guidance, and secure coding practices to software development teams.
• Guide the development and execution of Incident Response (IR) plans to rapidly contain and mitigate security events, safeguarding massive enterprise data ecosystems across Gosoft and affiliated platforms.

คุณสมบัติ

คุณสมบัติด้านความรู้และความสามารถ

• Experience 7–10+ years (Expert / Specialist level).
• Master-level expertise in Enterprise Security Architecture or IT Governance.
• Proven ability to drive organizational-wide security strategies.
• Strong communication and stakeholder management skills; capable of clearly translating and communicating technical security risks to non-technical stakeholders and management.
• Capable of mentoring and providing guidance to technical teams.
• Audit & Compliance Domain: Deep understanding of internal IT audits, risk assessments, and gap analyses.
• Governance Frameworks: ISO 27001, NIST, GDPR/PDPA, ITIL, COBIT, PCI-DSS
• Security & Audit Tools (Operational Understanding): SIEM (Splunk, QRadar, ELK), EDR/MDR, IDS/IPS, WAF, DLP, IAM, and Vulnerability Management tools.
• Professional Certifications (Highly Preferred / Advantageous) For Audit/Governance: CISA, CISM, CRISC, ISO 27001 Lead Auditor / Implementer. For Security (Plus): CISSP, CEH, OSCP.

สวัสดิการ

• ทำงานสัปดาห์ละ 5 วัน
• ประกันสุขภาพ
• ค่าทำงานล่วงเวลา
• ประกันสังคม
• ตามข้อตกลงของบริษัท

สนใจสมัครงานตำแหน่งงานนี้กรุณาติดต่อ

การเดินทาง

ไม่มี

แจ้งวัฒนะ-ปากเกร็ด 28

ไม่มี

ไม่มี

ไม่มี

การเดินทางเพิ่มเติม : สถานที่ทำงาน: The Tara Park แจ้งวัฒนะ