CS - Identity Management and Consultant Specialist

Become a part of Thailand’s no.1 Digital Service Provider, Who strives to provide best services that help people fulfil their dreams.

We are looking for potential candidates who are eager to learn and grow to join our young talent team.

Job Posting Location

Job Summary

Job Description

Key Responsibilities

1. Cyber Security Consulting & Security Advisory 

• Act as a trusted Cyber Security Advisor to business units, project teams, and external partners.
• Provide cybersecurity consultation to ensure appropriate protection of information assets, applications, infrastructure, and business services.
• Advise on Security Architecture for new projects, system enhancement initiatives, and emerging technologies.
• Provide guidance on Secure Software Development Lifecycle (SSDLC) and Security-by-Design principles.
• Perform Security Design Reviews and Architecture Reviews.
• Advise on Cloud Security, Infrastructure Security, Network Security, and Data Protection controls.
• Promote and establish cybersecurity best practices throughout the organization.

2. Cyber Risk Assessment & Threat Management & Security Incident Response Support  

• Conduct Cyber Risk Assessments across systems, applications, projects, and business processes.
• Perform Threat Modeling and security risk analysis.
• Identify security vulnerabilities, threats, and control weaknesses.
• Develop and recommend risk mitigation strategies and security controls.
• Conduct Security Gap Assessments and Control Effectiveness Reviews.
• Support enterprise cyber risk management activities.

• Support the development and enhancement of Incident Response processes and procedures.
• Provide security expertise during cybersecurity incidents and investigations.
• Assist in impact assessment, root cause analysis, and incident remediation activities.
• Prepare Incident Reports and Post-Incident Analysis reports.
• Facilitate Lessons Learned sessions and continuous security improvement initiatives.
• Support Cyber Resilience and Business Continuity programs.

3. Security Policy Standard & Governance 

• Develop, maintain, and improve cybersecurity policies, standards, procedures, and security baselines.
• Establish and maintain security control frameworks.
• Ensure alignment with regulatory, legal, and industry requirements.
• Support compliance initiatives related to ISO/IEC 27001, NIST CSF, CIS Controls, PCI-DSS, CSA CCM, and applicable privacy regulations.
• Provide governance guidance to stakeholders regarding cybersecurity requirements and controls.

4. Research & Innovation 

• Monitor emerging cybersecurity technologies, standards, and threat landscapes.
• Analyze threat intelligence and assess potential impacts to the organization.
• Evaluate new security technologies, frameworks, methodologies, and solutions.
• Conduct Proof of Concept (PoC) activities for cybersecurity initiatives.
• Integrate research findings into the continuous improvement of cybersecurity programs, policies, and controls.

Qualifications

• Bachelor's Degree or higher in Cyber Security, Computer Science, Information Technology, Computer Engineering, or related disciplines.
• Minimum 5 years of experience in Cyber Security, Information Security, IT Security, or IT Infrastructure.
• Proven experience in Cyber Security Consulting, Security Architecture Review, or Cyber Risk Management.
• Strong understanding of Security Architecture, Application Security, and Infrastructure Security.
• Experience in Cloud Security and Identity & Access Management is preferred.
• Experience working across multiple stakeholders and project environments.
• CISSP or CISA/CIAM will be advantage 
• Good attitude, Strong communication and presentation skills 

Recruiter