Senior IT Governance

ตำแหน่งงาน
: Senior IT Governance

ฝ่ายงาน
: Architecture and Security

วัตถุประสงค์ของการมีตำแหน่งงานนี้ (Job Purpose)
:

"Develop and Manage IT Governance Policy, IT Data Governance, IT Procedures/Process, IT Architecture Landscape.

Support IT Audit by Internal, External and Regulator

Monitor and report E2E from IT Development to IT Service and Operation"

ภารกิจหลัก (Key Task)
:  (#EnterpriseArchitect #SecurityArchitect #CybersecurityArchitect #LeadArchitect #ITGRC #ITGovernance)

Developing and enhancing IT policy, procedures and processes related to IT management and security

Providing IT & security awareness session to enhance understanding level of policies and requirements

Performing project management related to ISO27001, PDPA compliance

Follow up and report on the implementation of new laws and regulations that related to IT security management, IT governance and related IT security activities.

Monitor and work with IT infrastructure and software development teams to close the deviations and non-compliance issue dynamic work

Responsible for day-to-day governance issues related to all IT operation and software quality and cyber security concerns to ensure compliance of IT & security policy, standard, and procedure

Manage and support IT disaster recovery plan (IT DRP).

Collaborate with cross-functional teams to ensure alignment of IT and Security practices with organizational goals and objectives.

Prepare and present reports and recommendations to senior management regarding IT and Security governance initiatives.

10.  Develop and Maintain the Enterprise Security Architecture Blueprint: Design and govern the official security architecture using the TOGAF framework to create a master plan that aligns security with business objectives.

11.  Define and Enforce Security Architecture Principles: Establish and enforce foundational rules (e.g., Secure by Design, Zero Trust) that guide all technology projects to ensure a consistent and high level of security across the organization.

12.  Lead Security Design Reviews: Act as the primary security authority within the Architecture Review Board (ARB) to formally approve or reject system designs, ensuring they comply with the established security blueprint and standards.

วุฒิการศึกษา (Education)

Bachelor's Degree or higher in Computer Engineering, Computer Science, Management Information System, Information Technology or any related fields.

ประสบการณ์และคุณสมบัติอื่น ๆ ที่จำเป็น
(Experience, License, and other necessary job qualification)(#TOGAF #SABSA #ISO27001 #PDPA #CISSP #CISM #CRISC #ZeroTrust #SecurityByDesign)

At least 10 Years' experience for IT Governance, IT Security, IT Compliance and IT Architecture

Knowledge in Cyber Security / IT audit / IT Governance / Software Quality Assurance

Knowledge of International Security frameworks, Standards, and Guidelines e.g., ISO 27001, PCI-DSS, OWASP, Thai PDPA, Thai Cyber Law Crime Act, Bank of Thailand regulation and etc.

Possess managerial skill and team management.

Preferable: Banking or Financial business domain

Demonstrated Experience in Security Design: A strong track record of designing complex, multi-layered security solutions for both on-premise and cloud (AWS, Azure, GCP, Huawei) environments.

Advanced Architecture-Specific Certifications: TOGAF 9 Certification and/or CISSP-ISSAP (Information Systems Security Architecture Professional) are highly desirable and will be given strong preference.

Certifications, such as TOGAF, COBIT, CRISC, CISSP, ISO27001, CISA, CISM or relevant governance certifications are highly desirable

Good communication in written and spoken both Thai and English languages