Senior IT Security & Compliance Specialist

 Key responsibilities: 

• Design and develop effective IT Security architecture, IT Security controls  
• Research the latest information technology security trends 
• Lead and development of cyber security policies  
• Consult and ensure IT Staff design and build the secure platform 
• Develop IT Security policy, standards, guidelines , security baseline and hardening guidelines 
• Lead of vulnerability scanning, source code scan and ensure the vulnerabilities have been fixed before production 
• Evaluate and setup security tools  
• Manage vendor to perform penetration testing 
• Measure and ensure compliance with ISO27001, PDPA and other regulatory requirements 
• Build and conduct Security Awareness Training Program 

 Qualifications:

•  Bachelor’s degree or higher in Computer science, Computer Engineer, Information Technology, ICT, or relevant fields  
• At least 3 years ‘experience in Risk management, IT Security, IT Audit, IT Technical or architecture design 
• Proficient in security design and operation 
• Profession certificate of CISM, CISSP, CISA is a plus 
• Skills in communication, management and has service mind