Siam Commercial Bank

สมัครโปรดคลิกที่ปุ่ม "Apply"

If you are an active SCB employee, please apply through Workday by searching "Find Jobs".

If this is your first time applying you will need to create a candidate account when you click on apply.

Job Description

Job Responsibilities

• Lead and execute technology risk assessments, identifying potential vulnerabilities and threats across various IT systems and processes.
• Conduct in-depth information technology audits to evaluate the effectiveness of internal controls and compliance with relevant policies and regulations.
• Develop and implement IT risk management strategies, frameworks, and policies in line with industry best practices and regulatory requirements.
• Perform detailed vulnerability assessments and penetration testing to identify and prioritize security weaknesses.
• Provide expert guidance on cybersecurity and information security best practices, including IT security architecture and security controls.
• Utilize investigative skills to analyze security incidents, identify root causes, and recommend corrective actions.
• Collaborate with various business units and IT teams to embed risk management principles into project lifecycles and operational processes, leveraging Agile Methodology.
• Contribute to the design and implementation of robust internal controls to mitigate identified technology risks.
• Prepare comprehensive reports on technology risk posture, audit findings, and recommendations for senior management and stakeholders.
• Stay abreast of emerging technology risks, cybersecurity threats, and regulatory changes to proactively adapt risk assurance strategies.

Job Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. Master's degree or relevant certifications (e.g., CISA, CISSP, CRISC) preferred.
• Minimum of 5-7 years of experience in IT risk management, information security, or IT audit, preferably within the financial services industry.
• Proven experience with Agile Methodology in a technology or risk assurance context.
• Strong expertise in Cybersecurity and Information Security principles, frameworks, and best practices.
• Extensive experience with Information Technology Auditing and assessing Internal Controls.
• Demonstrated proficiency in IT Risk and Security Assurance, including IT Risk Assessments and Risk Analysis.
• In-depth knowledge of IT Security Architecture and Security Controls.
• Practical experience in conducting Vulnerability Assessments.
• Excellent Investigative Skills for incident analysis and root cause identification.
• Familiarity with Risk Management Information Systems.
• Strong analytical, problem-solving, and communication skills, with the ability to articulate complex technical issues to non-technical audiences.
• Ability to work independently and as part of a team in a fast-paced and evolving environment.

We're committed to bringing passion and customer focus to the business.

If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us.