Cyber Security Consultant (Red Team)

About the Company:

Our client is a leading organization among the Top 5 largest companies in Thailand, recognized for innovation, operational excellence, and a strong commitment to employee engagement and development. The company fosters a collaborative and dynamic work environment where employees are encouraged to drive meaningful change, embrace continuous learning, and contribute to the organizations long-term success.

This is an exciting opportunity to join an industry leader in Thailand, where you will be playing a pivotal role in ensuring the security and compliance of the organizations digital environment.

Job Responsibilities:

• Policy & Governance: Develop, implement, and maintain cybersecurity policies, standards, and baselines that align with international best practices and regulatory requirements. Ensure continuous compliance with relevant laws, regulations, and industry frameworks (e.g., ISO/IEC 27001, NIST, GDPR).
• Strategic Advisory: Provide expert cybersecurity consulting to internal departments, project teams, and external partners to ensure the protection of information assets and systems. Act as a trusted advisor in security architecture, secure software development, and infrastructure protection.
• Risk Management: Conduct cyber risk assessments and threat modeling across systems and processes. Recommend and implement mitigation strategies to address identified vulnerabilities and risks. Support incident response planning and execution, including post-incident analysis and reporting.
• Compliance Monitoring & Improvement: Monitor internal and external compliance with cybersecurity policies and standards. Analyze security weaknesses and gaps, and propose enhancements to strengthen the organizations security posture.
• Research & Innovation: Stay current with emerging technologies, global cybersecurity standards, and threat intelligence. Lead research initiatives to evaluate new tools, frameworks, and methodologies for improving cybersecurity practices. Integrate findings into the continuous development of cybersecurity policies and controls.
• Collaboration & Reporting: Collaborate with IT, legal, compliance, and business units to align cybersecurity initiatives with organizational goals. Prepare reports and presentations for senior management on cybersecurity metrics, risks, and strategic initiatives.

Requirements

• Bachelors degree or higher in computer science, information technology, Cyber Security, or a related field.
• 7+ years of experience in Cyber Security, IT Infrastructure, and Data Network.
• Training experience: Security Plus (Sec+) or equivalent certifications, compliance with ISO-27001, CSA-STAR, PCI-DSS.
• Knowledge of Cyber Security, Computer Data Networks, Programming, IT & Cyber Security Operations.
• Strong communication and presentation skills with a positive attitude.