IT Governance & Cybersecurity Specialist

Salary: ฿60,000 – ฿85,000 per month

Key Responsibilities

IT Governance, Risk & Compliance (70%)

• Policy & Framework Management: Develop, implement, review, and enforce IT and Information Security policies, standards, and procedures in alignment with international frameworks (e.g., ISO/IEC 27001, COBIT, NIST) and local statutory regulations (e.g., PDPA, Cybersecurity Act).

• IT Compliance & Audit Coordination: Act as the primary liaison for internal and external IT audits. Monitor, track, and ensure timely remediation of audit findings and non-compliance issues across all IT functions.

• IT Risk Management: Conduct comprehensive IT risk assessments, maintain the IT Risk Register, and collaborate with technical teams to design and execute effective risk mitigation plans.

• Third-Party Risk Assessment: Evaluate the security posture and compliance levels of third-party vendors, suppliers, and cloud service providers prior to onboarding and during periodic reviews.

• Governance Reporting & Metrics: Define, track, and report on key IT Governance metrics, Key Performance Indicators (KPIs), and Key Risk Indicators (KRIs) for executive leadership and committee reviews.

Cybersecurity Operations & Advisory Support (30%)

• Security Risk Assessment: Support technical teams by performing pre-production security assessments, evaluating business logic vulnerabilities, and ensuring adherence to "Security by Design" principles.

• Incident Response Coordination: Assist the technical cybersecurity team during security incidents by managing communication, facilitating documentation, and leading Post-Incident Reviews to translate technical failures into governance improvements.

• Security Awareness & Culture: Design, organize, and deliver organization-wide cybersecurity awareness training programs and simulated phishing exercises to foster a security-first culture.

• Access & Identity Governance: Review and audit identity and access management (IAM) privileges, ensuring the principles of least privilege and separation of duties are strictly maintained.

Qualifications & Skills

• Education: Bachelor’s degree in Computer Science, Information Technology, Computer Engineering, Cybersecurity, or a related field.

• Experience: Minimum of 3–5 years of professional experience in IT Audit, IT Governance, IT Risk Management, or Information Security Compliance roles.

• Technical & Functional Knowledge:

  • Deep understanding of IT Governance frameworks and standards, specifically COBIT, ISO/IEC 27001, and ITIL.

  • Strong working knowledge of data protection regulations (e.g., PDPA, GDPR) and cybersecurity laws.

  • Solid foundational knowledge of technical cybersecurity concepts, including Network Security, Cloud Architecture (AWS/Azure/GCP), Identity & Access Management (IAM), and Vulnerability Management, sufficient to translate technical issues into business risks.