Assistant IT Security Section Manager

หน้าที่และความรับผิดชอบ

• Major Accountabilities - Security Controls It aims to coordinate external audits, tackle the regulators requirements and smartly invest in IT controls 1. Establish reviews, assess, testing in IT InfoSec (Conducting security assessments and penetration tests to identify vulnerabilities in systems, networks, and web applications) 2. Perform regular security testing 3. Provide recommendation to IT & BU 4. Maintain and follow up the findings - Security Architecture Aims to unify security design that addresses threats and risks scenarios related to our IT environment. It also specifies when and where must be relevant security controls applied. 1. Translate security vision to security model (Security architecture design and consulting) 2. Create group architecture of security service 3. Assess impact of cyber threats on Business service 4. Assure all IT service are comply security Policy - Secure Development Secure development aims to secure customer applications by design to limit further investments caused by development bugs and mistakes 1. Create security baseline 2. Adapt the baseline 3. Create a group virtual team to share practices 4. Automate and integrate security check into development pipeline (DevSecOps) - Security Operation Security Operations aims to keep security tools standardized, efficiently utilized, and continuously developed in line with Security governance, architecture and financial market standard requirements 1. Implement security technologies 2. Standardize/develop security technology stack 3. Provide expertise and consultation 4. Detect and prevent any cyber threat in IT environment 5. Security Operation Center e.g. Blue team and Red team 6. Regular review all user privilege with system owner and team member Job Qualification Education Background - Master/Bachelor’s degree in Computer Science, Computer Engineer, Information Technology or related fields Experiences : Minimum of 10 years of experiences in Information Security design, consulting and assessment - Experience with Security architecture design and consulting - Experience with Security consulting on DevSecOps in advantage - Experience with Security assessment e.g. penetration tests, source code review, VA scan - Experience with Security consulting on Cloud environment e.g. AWS or Azure in advantage - Experience with Security consulting on Security Operation Center e.g. Blue team and Red team is advantage Knowledge - Local Security requirements from Regulatory - Relevant local and international security standards and best practice such as OWASP,NIST,ISO 27001 - Cyber security framework - Project Management

คุณสมบัติ

คุณสมบัติด้านความรู้และความสามารถ

• - Local security requirements from Regulatory - Relevant local and international security standards and best practices such as OWASP - NIST - ISO 27001 - Cyber security framework - Project management/Skill written and verbal communication and presentation skills

สวัสดิการ

• ตามข้อตกลงของบริษัท
• ประกันสังคม
• ประกันชีวิต
• ประกันสุขภาพ
• ทำงานสัปดาห์ละ 5 วัน
• สิทธิการเบิกค่าทันตกรรม

สนใจสมัครงานตำแหน่งงานนี้กรุณาติดต่อ

การเดินทาง

ปุณณวิถี / อุดมสุข / บางนา

สุขุมวิท / สำโรง

ไม่มี

ไม่มี

ไม่มี

การเดินทางเพิ่มเติม : ไม่ระบุ