Job Purpose

Officer, Cybersecurity is responsible for developing and implementing a comprehensive cybersecurity strategy, conducting proactive security activities, managing cybersecurity operations, supporting audit processes, and overseeing data management. This role ensures the protection of the organization’s information assets through integrated risk management, continuous assessment, and strategic planning.

Key Accountabilities

Cybersecurity Strategy and Planning:

• Develop and implement a comprehensive cybersecurity strategy.
• Conduct integrated risk management and assessments to identify and mitigate potential threats.
• Develop and maintain security policies, standards, and guidelines.

2.Proactive Security Activities:

• Perform vulnerability assessments (VA) and penetration testing (PEN test) to identify and address security weaknesses.
• Lead Red Team exercises and manage attack surface management to proactively identify potential threats.
• Conduct threat hunting to detect and mitigate advanced threats.
• Oversee patch governance to ensure timely updates and security patches are applied.

3.Cybersecurity Operations:

• Manage and implement cybersecurity projects, ensuring they are completed on time and within budget.
• Oversee the Security Operations Center (SOC) to monitor and respond to security incidents.
• Manage incident and crisis response, including the development and execution of incident response plans.
• Handle security contract management, ensuring all security-related contracts are properly managed and executed.

4.Data Management:

• Ensure the secure management of data across the organization.
• Develop and enforce data protection policies and procedures.
• Oversee data classification, encryption, and secure storage practices.
• Monitor data access and usage to prevent unauthorized access and data breaches.

5.Audit Support:

• Support internal and external audits by providing necessary documentation and evidence of compliance.
• Maintain an information security risk register and assist with audit preparations and follow-ups.

Professional Knowledge & Experiences

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Relevant certifications such as CISSP, CISM, CEH, or equivalent.
• Proven experience in cybersecurity strategy development, risk management, and security operations.
• Strong knowledge of security frameworks and standards (e.g., NIST, ISO 27001).
• Experience in managing Security Operations Centers (SOC).
• Experience in managing complex security projects.
• Excellent problem-solving and analytical skills.
• Strong communication and stakeholder management abilities.
• Excellent command of Thai/English and ability to effectively communicate at all levels (written and verbal)

Additional Desirable Qualification

CORE Competencies