Chief Information Security Officer (CISO) - Bangkok

Summary about this job

Detail information about job Chief Information Security Officer (CISO) - Bangkok. Terms and conditions vacancy

Chief Information Security Officer (CISO) - Bangkok

Our client is seeking a Chief Information Security Officer (CISO) to lead its Cybersecurity, Risk & Compliance team. This position reports directly to the Chief Information Officer, and is responsible for the security of our client’s assets including but not limited to technology, applications, information, employees and office locations.

Leadership Responsibilities

• Lead the Cybersecurity function. Drive Security Program to defend all Corporate assets.
• Provide Counsel to Leadership as it relates to critical risk and overall risk tolerance.
• Communicate threats and potential impact to the business strategy.
• Work cross-functionally to align cybersecurity strategy to business needs, promoting security function as an enabler of business objectives.
• Build key partnerships with IT, HR, Legal, Strategic Alliances, Support and Development.
• Promote collaborative, empowered work environment as a leader within the organisation.
  
  

Cybersecurity Program & Strategy

• Sell Security program to our client’s staff through continuous education and awareness programs.
• Drive security architecture throughout Corporate, private and public cloud environments.
• Work closely with Information Services to identify and mitigate critical threats to the organisation.
• When necessary, assist with deployment of security tools, process and policy required to ensure the confidentiality, integrity, and availability of our client’s information.
• Oversee all audit, regulatory and compliance obligations.
• Drive Secure Software Development Life Cycle as it relates to program interfaces, application architecture, data protection, identity and access management.
• Drive Incident Management program as it relates to policy, playbook, testing, and awareness.
• Oversee Corporate Change Management Programs, focusing on compliance with audit obligations.
• Oversee Third Party Vendor Management, specific to the security of Company and customer data.
• Oversee data-loss prevention and monitoring programs throughout all environments.
  
  

General Cybersecurity & Technology Responsibilities

• Understand and remain current with cyber threat landscape and appropriate defence mechanisms.
• Advanced understanding of security architecture as it relates to various Cloud hosting models.
• Advanced understanding of best-in-breed technologies to maintain secure cloud infrastructure.
• Advanced understanding of common application attacks and mitigation strategies.
• Advanced understanding of security standards such as PCI, HIPAA, CJIS, and GDPR.
• Understanding of security control frameworks such as NIST CSF, ISO 27002, and OWASP.

Professional Requirements:

• Bachelor Degree required, Masters preferred in a security-related field of study.
• 7 or more years in a leadership role as well as 10+ years in a technical role preferred.
• Experience of managing team sizes of 50-80+
• CISSP, CISM or industry-related certification required.
• Experience working directly with internet / ecommerce company’s a plus.
• Comfortable working with large data sets and data scientists

Relocation and visa sponsorship provided if required.