Information Security Engineer (IT Security)
Summary
An information security engineer at Bangkok Insurance who advises on security controls, develops and enforces policies, assesses and mitigates risks, runs vulnerability assessments and penetration tests, and manages log monitoring and incident investigation. Core focus: firewalls, IPS, log management/DLP, and standards like ISO 27001, PCI-DSS and PDPA.
Responsibilities:
1.Provide advisory and technical support on information security controls and solutions to fulfill requirements of the organization's information security policies and related regulations.
2.Develop and enforce security policies and guidelines.
3.Identify and assess risks in IT infrastructure and business operations, and provide recommendations for risk treatment. Design and implement security controls to mitigate the identified risks.
4.Assess security controls in place to ensure their effectiveness and efficiency.
5.Conduct or coordinate vulnerability assessment, penetration tests and security audits.
6.Manage the log monitoring system. Develop monitoring rules to capture interesting events and analyze suspicious events. Investigate security incidents under the supervision of team leader.
7.Upgrades system by implementing and maintaining security controls.
Qualifications:
· Bachelor or Master Degree in Computer Science, Computer Information System, Computer Engineering or related fields.
· Have a solid knowledge of information security (system, network and application security)
· Have technical skills in operating systems, networking, and security systems such as firewalls, IPS, and log management system, data loss prevention will have an advantage.
· Professional certifications such as CISSP, CompTIA Security+ will have an advantage.
· Knowledge of PDPA, ISO 27001, PCI-DSS international standard is a plus.
· Experience in General Insurance business is a plus.
· High responsibility, analytical mind, able to work independently.
· Work under pressure environment