Senior Information Security and Audit Officer

Responsibilities: IT Governance, Policy and Compliance Develop, review, and maintain IT policies, standards, operating procedures, and governance documentation to ensure alignment with corporate requirements, ADJ policies, Risk Management, Compliance, and internal and external audit requirements. Governance and Control Review: Review IT processes, policies, and supporting controls, identify potential gaps, and provide recommendations to relevant IT teams to strengthen governance, compliance, and audit readiness. IT Contingency and Business Continuity Planning: Develop and maintain IT contingency plans in alignment with the corporate Business Continuity Plan (BCP), IT Infrastructure teams, relevant departments, and external service providers or vendors. Audit Coordination and Evidence Management: Coordinate internal and external IT audit activities, including the collection, review, verification, and submission of supporting documents and evidence, to ensure accuracy, completeness, and timely delivery. Audit Finding and Remediation Management: Monitor and drive the resolution of audit findings, control deficiencies, and remediation actions raised by Internal Audit, External Audit, Risk Management, and Compliance until formal closure within the agreed timelines. Stakeholder Advisory and Coordination: Provide guidance to IT teams on governance, documentation, audit evidence, and compliance requirements, and coordinate with relevant internal and external stakeholders to support effective implementation. Governance Reporting: Prepare and maintain reports on audit findings, remediation progress, compliance status, and outstanding governance matters for management review. Other Responsibilities: Perform other duties and assignments as delegated by the supervisor or management. Requirements Bachelor’s degree in Computer Science, Computer Engineering or related fields. 3–5 years of relevant experience in IT Governance, IT Audit Coordination, IT Risk, IT Compliance, Internal Control, Information Security, or a related function. Experience in the insurance or life insurance industry is an advantage. Knowledge of or certifications in IT Audit, IT Governance, ITIL, COBIT, and ISO27001. Training in these areas is preferred. Benefit: Provident Fund: Company contributes 5–10% per month (based on company policy). Medical Benefits – Outpatient (OPD): Up to THB 15,000 per year. Group Insurance Coverage: Includes health insurance, accident insurance, and life insurance. Social Security Fund: Provided according to government regulations. Welfare Support: Marriage gift, childbirth gift, ordination support, and funeral assistance. Annual Bonus and Salary Adjustment: Based on company performance and annual review. Training & Development Support: The company regularly supports employees in attending training and seminars to enhance professional growth.