Security Governance Specialist - Virtual Bank

About the Role

We are seeking an experienced Security Governance Specialist to join our team. The successful candidate will be responsible for audit tracking, security project management, security risk management, and the establishment of policies, standards, and procedures. This role is critical in ensuring that our organization maintains a strong security posture and complies with relevant regulations and industry best practices. The Security Governance Specialist will also play a vital role in effectively communicating security issues to the technology team and collaborating with them to resolve these issues.

Responsibilities

• Oversee the planning, execution, and monitoring of security-related projects; develop project plans, schedules, and budgets, and track progress against established objectives.
• Coordinate with cross-functional teams to ensure successful project delivery and communicate project status, risks, and issues to relevant stakeholders.
• Identify, assess, and prioritize security risks across the organization; develop and implement risk mitigation strategies and controls; monitor and report on effectiveness.
• Develop, review, and maintain security policies, standards, and procedures; ensure alignment with regulatory requirements and industry best practices and promote adoption and enforcement.
• Effectively communicate security issues and concerns to the technology team and collaborate to develop and implement solutions; provide guidance and support on security best practices.

Qualifications

• Bachelor's degree in Information Security, Computer Science, or a related field.
• Minimum of 5 years of experience in information security with a focus on security governance; experience in audit management, risk assessment, and policy development.
• Professional certifications such as CISSP, CISM, or CRISC preferred.
• Excellent project management and organizational skills; proven experience acting as the expert in project teams.
• Strong communication and interpersonal skills with the ability to explain technical findings to non-technical professionals.
• Ability to work independently and deliver results under tight deadlines; systems thinking and talent to identify and execute broad security solutions.
• Good command in written and spoken Thai and English.