Bangkok, Bangkok, Thailand

Senior IT Security

 Job Description:

Responsibilities:

  • Oversee conducting an audit of the IT governance, cyber/IT security, IT application controls, and IT general controls to make sure the controls governing these procedures are sufficient and to proactively offer recommendations that add value.
  • Complete the assigned specific audit for IT fraud and mishandling.
  • Assemble and deliver the audit findings to the audit committees and executives. Monitor the management's response to the recommendation and assist in putting preventive or corrective measures into effect.
  • To increase the efficacy and efficiency of audits, start working on data analytical cases (with graphical reports).
  • Take part in IT initiatives where outside advisors are involved to offer guidance on appropriate controls throughout the project life cycle.
  • Offer advisory services for IT control of accountable tasks. Provide management with advice on how to enhance governance, systems, processes, controls, and risk awareness.
  • Assistance in organizing audits and other tasks. Develop work programs, keep up the internal audit system, and make sure the audit process is done professionally by actively collaborating with peers.
  • Offer knowledge of cutting-edge IT risks and technologies, including blockchain, cyber/information security, data privacy, third-party management, and IT governance.
  • Keep abreast of pertinent guidelines, regulations, and best practices.

Requirements:

  • A bachelor's degree or higher in an area linked to information technology.
  • 3-5 years of experience conducting internal or external audits, preferably in the financial services sector will be beneficial.
    Having a professional certification in IT security or audit is thought to be advantageous.
  • Proven expertise in information management, information/cyber security, IT application controls audit, or any combination of these fields.
  • A solid grasp of the principles behind information management, general IT controls, application controls, technological hazards, and information security.
  • The capacity to use relevant IT standards and best practices, such as PCI/DSS, COBIT, ITIL, ISO27001, and cyber security, in audit work.
  • Proficiency in Blockchain, Digital Asset, and Mobile Application security would be advantageous.
  • Possessing analytical abilities, self-motivation, and organization as a team player.
  • Effective leadership, teamwork, writing and verbal communication, and persuasion abilities.
  • Capable of picking up and applying new technology and solution expertise fast.
  • Capable of working both independently and under pressure.