IT Security & Compliance Manager

We are looking for an experienced IT Compliance and Security Manager to lead and enhance the company’s IT Governance, Compliance, and Security framework. This role will oversee risk management, regulatory compliance, and information security measures across multiple business units, ensuring all IT operations align with internal policies and external regulations.

• Develop and implement IT governance, risk, and compliance (GRC) strategies to align with business objectives.
• Ensure compliance with industry regulations such as PCI-DSS, Data Privacy Laws, and ISO27001, ISO27701.
• Identify and mitigate IT security risks, ensuring a robust cybersecurity framework.
• Oversee information security policies, incident response, and data protection measures.
• Conduct internal audits and manage external compliance assessments.
• Lead vendor security assessments and privacy security evaluations.
• Provide IT security awareness training for employees.
• Collaborate with regional IT teams to support security initiatives across multiple locations.

• Bachelor’s Degree in Information Technology, Security, Computer Science, or a related field.
• 8–12 years of experience in IT Governance, Compliance, and Security.
• Strong knowledge of risk assessment methodologies and compliance frameworks.
• Experience with ISO27001, ISO27701, NIST, GDPR, and other security standards.
• Relevant security certifications preferred (CISA, CISM, CISSP, SANS, GIAC).
• Strong problem-solving, analytical, and leadership skills.
• Ability to manage multiple projects and work independently.
• Fluent in English and Thai
• Willingness to travel regionally as needed.