Manager - Cyber Security Engineer

Manager - Cyber Security Engineer will work closely across business channels to identify and assess security risks, gaps in the application of policies and standards, weaknesses in processes and system controls. He or she will work closely with the wider team to deliver a number of group wide security improvement initiatives.

This role will be working with AXA International Markets Office Security, AXA Global Security and Internal Krungthai-AXA Team such as IT Lead, Internal Auditors, Business Unit Head, Project Managers.

Job Description:

• Identity & Access Management (IAM) & Privileged Access: Lead PAM governance, manage privileged access, and oversee identity lifecycle. Provide expertise on PAM tools (CyberArk) and implement strong authentication protocols. Support password security and role-based access recertification, addressing gaps promptly. Coordinate with global teams to align IAM practices.

• Security Incident Detection, Response, Monitoring & Orchestration: Developing and leading incident response strategies; managing Security Operations Centers (SOCs); implementing continuous monitoring, threat hunting, and fine-tuning SIEM, EDR, and log analysis tools to detect suspicious activities, investigate security breaches, and conduct proactive threat hunting. Leveraging Security Orchestration, Automation, and Response (SOAR) platforms to automate workflows, streamline incident handling, and improve response times.

• Cloud & Architecture Assurance: Review and validate cloud/hybrid architectures using SABSA, TOGAF standards. Verify cloud security controls, IAM policies, and infrastructure-as-code (Terraform, CloudFormation). Assess vulnerabilities and ensure compliance through security audits.

• System & Network Configuration Security: Conduct configuration reviews for systems and network devices (Windows, Linux, firewalls, VPNs). Verify compliance with standards (CIS, DISA STIGs, ISO, NIST, PCI-DSS). Automate checks and hardening processes using scripting (PowerShell, Bash). Regularly update firewall rules, network segmentation, and email security (SPF, DKIM, DMARC).

• Cyber Resilience & Crisis Management: Contribute to high-risk scenario planning, cyber resilience exercises, and forensic investigations. Manage external forensic vendors and participate as a crisis team member. Ensure lessons learned are integrated into security improvements.

• Web & Network Security: Oversee deployment of WAF, anti-DDoS, and network security controls. Conduct regular security monitoring, anomaly detection, and review of Shadow Cloud/AI risks. Manage web filtering and data leakage mitigation strategies.

• MythosAI: Lead MythosAI Taskforce in reviwing and providing feedback on security-relevant for Infrastructure, Server, Database, Network and Vendor Security.

• Vendor Security: Conduct Vendor Security Due Diligence, provide security requirements on RFP.

• Other: Assist in ISO27001 program implementation / Prepare reports on strategic KPIs and other agreed KPIs to Local CSO / Update knowledge and technical skill to cope with new vulnerability and threats

Qualifications:

• Bachelor’s degree in Computer Science, Computer Engineering, Information Technology or IT related field.

• At least 7 years’ experience in information security, security consultancy, security tool implementation and/or IT security operations

• Experience in Identity & Access Management (IAM), Threat Detection/Security Monitoring and Cloud Security with AI Security are preferred

• Capable to analysis of security threats such as information technology, network intrusion on servers, spread of malware or violations of policy and operations staff.

• CISSP, CISA, GIAC, CEH, CompTIA, and/or Security+ certifications preferred

• Good interpersonal skills – able to communicate effectively with various levels (from end-users to executive).

• Good command of written and spoken English.

• Strong Computer literacy in using Microsoft Office and Microsoft Visio.