HomeVacanciesSenior IT Security Policy and Standard Management

Senior IT Security Policy and Standard Management

สนใจสมัครงาน กรุณาส่ง E-mail ระบุตำแหน่งงานที่สนใจ และแนบประวัติ (Resume) ส่งถึง hr.recruiting@ktcs.co.th

Responsibilities

The Senior Manager, Security Governance is responsible for leading and overseeing the organization’s cybersecurity governance program, ensuring alignment with business objectives, regulatory requirements, and industry best practices. This role drives cybersecurity strategy, policy management, risk governance, compliance oversight, security metrics reporting, and stakeholder engagement to strengthen the organization’s cyber resilience and risk posture.

Responsibilities:

  1. Security Governance & Strategy
  • Develop, implement, and maintain the organization’s Information Security Governance Framework.
  • Establish cybersecurity strategies, objectives, and roadmaps aligned with business goals.
  • Ensure security governance practices support the organization’s digital transformation initiatives.
  • Advise senior management on cybersecurity risks, emerging threats, and governance issues.
  • Promote a risk-based approach to cybersecurity decision-making.
  1. Cyber Risk Management
  • Lead enterprise-wide cyber risk management activities.
  • Identify, assess, prioritize, and monitor cybersecurity risks.
  • Facilitate cyber risk reviews and risk acceptance processes.
  • Develop risk mitigation strategies and track remediation activities.
  • Report key cyber risks and exposure trends to executive management and risk committees.
  1. Policy, Standard & Control Governance
  • Develop and maintain information security policies, standards, procedures, and guidelines.
  • Ensure alignment with industry standards and regulatory requirements.
  • Review and update governance documents regularly to address evolving threats and business changes.
  • Establish security control requirements and governance mechanisms across the organization.
  1. Cyber Resilience & Governance Oversight
  • Provide governance oversight for Incident Response, Business Continuity, and Disaster Recovery programs.
  • Participate in cyber crisis management and executive tabletop exercises.
  • Ensure lessons learned from incidents are incorporated into governance and risk management processes.
  • Support the organization’s cyber resilience and operational resilience objectives.

Qualifications

  • Bachelor’s degree or equivalent experience and education required
  • 10+ years of experience in Information Security, Cybersecurity, Risk Management, or Governance
  • 5+ years of leadership experience in Security Governance, GRC, Cyber Risk, or Compliance.
  • Strong telecommunication and system security background
  • Experience in financial services, banking, insurance, or highly regulated industries is preferred.
  • Excellent written and verbal communication skills