Information Technology Security

About the Company

ÆON Thana Sinsap (Thailand) PLC (AEONTS) is a Financial Services company located in Bangkok City, Thailand. Our company provides a range of services including loans, credit cards, Insurance Broker and installment programs to our customers. We are committed to providing exceptional customer experience and value to our customers.

Responsibilities

• Manage and control IT security of company’s infrastructure such as firewalls, cloud-based hosting, internet policies and etc.
• Perform IT security assessments, monitor and analyze cyber security events.
• Work on IT security design and analysis, and business continuity management.
• Evaluate and analyze threat, vulnerability, impact and risk to security issues discovered from security assessments.
• Advise company on security issues, including technical explanations and remediation of vulnerabilities in processes and controls.
• Assist internal developers and the development team in patching security vulnerabilities.
• Implement security guidelines for company collaborations with teams.
• Operationalize cyber security risk management capabilities such as Business Impact Assessment of the business unit’s digital portfolio to identify crown jewels to be protected in line with risk appetite.
• Deploy relevant cybersecurity controls, including required local regulatory compliance, to ensure applications and services are developed with a secure-by-design principle.
• Drive cyber risk acceptance, risk mitigation, finding management processes, and risk reporting to ensure cyber risks are managed and residual risks understood by leadership.
• Champion cyber security change program activities to drive awareness and behaviors across business units and increase cyber resilience.
• Drive implementation and integration/adoption of security capabilities and change management to ensure business alignment and effectiveness.
• Maintain business-level security KPIs/KRIs (e.g., patch compliance, phishing click rates, third-party risk ratings) and produce dashboards and reports for management.

Qualifications

• Bachelor’s degree in Computer Engineering or related field.
• Minimum 8-10 years of IT security management and project management in complex projects in banking, fintech, or insurance business.
• Good knowledge and understanding of IT and/or cybersecurity related laws and regulations such as IT Risk Management Implementation, Computer Crime Act, Personal Data Protection Act (PDPA), etc.
• Relevant industry certifications are an advantage (e.g., ISO 27001, CISA, CISSP, CGEIT, etc.).
• Working knowledge of local information and cybersecurity-related regulations and requirements is a MUST.
• Ability to develop, review, and maintain documentation on time.
• Excellent English communication and interpersonal skills, with proven ability to resolve conflicts and build strong rapport with diverse stakeholders.
• Proven ability to build partnerships across local, regional, and cross-functional teams to align security goals with business objectives.
• Detail-oriented self-starter with strong analytical skills and a result-oriented mindset, capable of multitasking and adapting quickly to shifting priorities in a fast-paced environment.

Additional Information

Location: Sermmit Tower (Work from office)

If you are interested in the above position, please send your full resume to HRSSC-Recruitment (rcmheadoffice@aeon.co.th) Tel. 02-302-4771