Security Governance Specialist

About the Role

We are seeking an experienced Security Governance Specialist to join our team. The successful candidate will be responsible for audit tracking, security project management, security risk management, and the establishment of policies, standards, and procedures. This role is critical in ensuring that our organization maintains a strong security posture and complies with relevant regulations and industry best practices. The Security Governance Manager will also play a vital role in effectively communicating security issues to the technology team and collaborating with them to resolve these issues.

Responsibilities

• Oversee the planning, execution, and monitoring of security-related projects; coordinate with cross-functional teams to ensure successful project delivery; develop project plans, schedules, and budgets; track progress against established objectives; communicate project status, risks, and issues to relevant stakeholders.
• Identify, assess, and prioritize security risks across the organization; develop and implement risk mitigation strategies and controls; monitor and report on the effectiveness of risk management activities; collaborate with stakeholders to ensure a consistent approach to risk management across the organization.
• Develop, review, and maintain security policies, standards, and procedures; ensure alignment with regulatory requirements and industry best practices; collaborate with stakeholders to promote adoption and enforcement; provide guidance and support in interpretation and implementation.
• Effectively communicate security issues and concerns to the technology team; collaborate to develop and implement solutions to address identified security issues; provide ongoing support and guidance on security best practices; foster a strong working relationship between security governance and the technology team to promote a culture of security awareness and collaboration.

Qualifications

• Bachelor's degree in Information Security, Computer Science, or a related field.
• Minimum of 5 years of experience in information security with a focus on security governance.
• Strong team management and leadership experience.
• Professional certifications such as CISSP, CISM, or CRISC are preferred.
• Strong understanding of information security principles, frameworks, and best practices; experience in audit management, risk assessment, and policy development.
• Excellent project management and organizational skills; demonstrated ability to work independently and deliver results under tight deadlines.
• Ability to identify and create a broad vision for a security solution and to execute it; systems thinking; proven experience acting as the expert in project teams; ability to explain findings to non-technical professionals.
• Good command in written and spoken Thai and English.

Additional Information

• Work arrangement: onsite
• Employment type: Full-time