Job Purpose (Accountability)

Develop and maintain Cyber Security policies, measures, and practices in compliance with applicable laws, regulations, and standards. Assess and monitor IT security risks, including preparing and continuously updating the Security Risk Register. Support audits conducted by internal (Internal Audit) and external (External Audit) parties. Coordinate with relevant departments to control and protect personal data in accordance with PDPA requirements. Develop and deliver Cyber Security Awareness training for employees. Prepare Compliance Gap Analysis reports and Remediation Plans to strengthen the organization’s security and regulatory compliance.

Duties / Responsibilities

1. Develop, review, and improve Cyber Security policies, measures, and practices to ensure compliance with relevant laws, regulations, and international standards.

2. Assess and monitor IT security risks, and regularly maintain and update the Security Risk Register.

3. Prepare Compliance Gap Analysis reports and develop Remediation Plans to reduce risks and enhance compliance.

4. Support and facilitate audits conducted by both internal (Internal Audit) and external (External Audit) parties regarding Cyber Security and IT Security.

5. Coordinate with relevant departments to manage and control personal data protection in accordance with PDPA requirements.

6. Design and implement Cyber Security Awareness training and activities for employees to promote understanding and awareness of Cyber Security.

7. Prepare and present reports on risks, security, and compliance to management and relevant stakeholders.

8. Keep up to date with new standards, laws, and regulations related to Cyber Security and Data Protection, and recommend appropriate adoption within the organization.

Education

Work Experience

TOEIC

Minimum score 650 or above.

Other Qualification

1. Knowledge of ISO 27001, NIST, PDPA, SOX, or GDPR
2. Professional certifications such as ISO 27001 LA/LI, CISA, or CRISC will be considered an advantage.