Description
Responsibilities: · Develop and maintain security policies, standards and procedures across the organization. Conduct security assessment/security audits to ensure compliance on security policies, standards and procedures. · Implement security controls to ensure compliance with policies, standards and procedures as well as industry standards (e.g.
ISO27001, SOC2 Type2), laws and regulations (e.g. BOT, SEC, PDPA). · Providing support for audit requests, including Internal Audit, External Audit, ISO Audit, Customer Audit & Questionnaires · Conduct third party security management including third party security assessment and security contract review.
· Manage and coordinate with stakeholders including vendors on implementation and configuration and maintenance of security technologies (e.g. Firewall, IDS/IPS, EDR, WAF, DLP, SIEM). · Identify and mitigate vulnerabilities in the organization's systems and networks.
Notify related Business Unit on Common Vulnerabilities and Exposures (CVEs). Hosting the Patch Management Meeting with the system owners, developer, and server operation team, as well as recommending a solution. · Coordination for Penetration Testing (External Pen-tester).
Analyze penetration testing result and coordinate with system owners and developer for resolutions. · Ensure source code review/source code scanning is conducted. Analyze review/scanning result and coordinate with system owners and developer for resolutions.
· Tracking out-of-date anti-virus and/or En
Full description, company and the link to apply — after you sign in.
Sign inEmployer contacts (email/phone/telegram) are hidden from the public preview —
send your CV, and we will connect you directly.