PR/120297 | IT Security Manager

Location: Bangkok, Thailand
Employment Type: Full-time

About the Role

We are seeking an experienced Information Security Manager to lead and strengthen the organization's security, risk management, and compliance initiatives.

This role is responsible for developing and maintaining security programs, managing security operations, supporting compliance activities, and collaborating with business and technology teams to ensure the organization's information assets remain protected. 

Key Responsibilities:

Security Management

• Develop, implement, and maintain the organization's information security strategy, policies, and standards.

• Identify, assess, and manage cybersecurity risks across systems, applications, and infrastructure.

• Monitor emerging threats and recommend appropriate mitigation measures.

• Lead security incident response activities and coordinate investigations when required.

• Conduct security assessments and recommend improvements to strengthen security posture.

• Promote security awareness and best practices across the organization.

Risk & Compliance

• Ensure compliance with relevant security standards, regulations, and industry best practices.

• Support internal and external audits, assessments, and certification activities.

• Maintain security documentation, policies, procedures, and control frameworks.

• Track remediation activities and ensure identified risks are addressed appropriately.

• Assist in establishing governance processes and security controls across the organization.

Security Operations

• Oversee vulnerability management activities, including risk review and remediation tracking.

• Coordinate security testing, assessments, and vendor reviews.

• Evaluate and implement security tools and technologies to enhance protection and

• monitoring capabilities.

• Monitor security metrics and prepare reports for management.

Stakeholder Management

• Work closely with IT, Engineering, Operations, and Business teams to integrate security into daily operations.

• Provide security guidance and recommendations for technology initiatives and projects.

• Support customer security reviews, questionnaires, and due diligence processes when required.

• Act as a trusted advisor on information security matters for internal stakeholders.
   

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field.

• 8+ years of experience in Information Security, Cybersecurity, IT Risk, IT Governance, or related disciplines.

• Experience managing security programs, policies, and operational controls.

• Strong understanding of information security principles, risk management, and security governance.

• Familiarity with cloud security, network security, vulnerability management, and incident response.

• Experience working with security frameworks and compliance standards.

• Strong analytical, problem-solving, and decision-making skills.

• Excellent communication and stakeholder management abilities.

• Good command of English, both written and spoken.
   

Preferred Qualifications

• Professional certifications such as CISSP, CISM, CISA, Security+, CEH, or equivalent.

• Experience in cloud environments (AWS, Azure, GCP).

• Exposure to security audits, compliance assessments, or governance programs.

• Experience leading cross-functional security initiatives.

• Background in technology, software, digital services, fintech, e-commerce, or enterprise IT environments.