IT Security GRC

Responsibilities: Analyze IT projects and provide advice on IT Security requirements / Implement and maintain security controls. Implement security control, risk assessment framework and program that align to regulatory requirements, ensuring documented and sustainable compliance. Provide advisory on technology risks, security controls and Personal Data Privacy control. Ensure IT Risk, IT control assessment review the appropriateness of relevant risk mitigation strategies and remedial actions with follow-up and escalation. Analyze, design and manage the work process, as well as to supervise the process improvement in accordance with the IT Standards. Assessing risk and compliance against security standards such as ISO27001, PCI DSS and NIST Cyber security standards. Serve as security expert and control trainings when needed. Attend meetings with change advisory board to determine IT Security needs. Develop and implement security policies, standard and procedure. Qualifications: Bachelor degree or higher in Computer Science or IT related fields Experiences in IT Security, IT Risk Management, or IT Compliance Knowledge of ISO27001 ,PDPA ,Compliance and regulations. Develop and enhance the information security management framework. Experience in risk management, security control, IT Governance standard : ISO27001. Having knowledge in banking / Financial and insurance business in advantage. Good communication and interpersonal skills