Responsibilities:
Develop and Implement IT Governance Frameworks: Design, implement, and maintain IT governance frameworks, including policies, procedures, and controls aligned with ISO27001, PDPA, and other relevant regulations and standards.
Risk Management: Conduct risk assessments and identify potential IT risks related to data security, privacy, and compliance. Develop mitigation strategies and controls to minimize risks and ensure business continuity.
Compliance Monitoring: Monitor and assess compliance with IT governance policies, regulatory requirements, and industry standards. Perform regular audits and assessments to identify gaps and areas for improvement.
Data Governance: Oversee data governance initiatives to ensure the integrity, confidentiality, and availability of sensitive information. Develop data classification schemes, data retention policies, and access controls to safeguard critical data assets.
Security Incident Response: Lead incident response efforts in the event of security breaches or data incidents. Develop incident response plans, coordinate response activities, and conduct post-incident reviews to prevent future occurrences.
Training and Awareness: Provide training and awareness programs on IT governance, security best practices, and regulatory compliance to employees across the organization. Foster a culture of security and compliance awareness.
Vendor Management: Evaluate third-party vendors and service providers for compliance with IT governance requirements. Establish vendor management processes to ensure the security and integrity of outsourced services and products.
Continuous Improvement: Stay abreast of emerging threats, technologies, and regulatory changes impacting IT governance in the financial services industry. Continuously evaluate and enhance IT governance practices to address evolving risks and challenges.
Qualifications:
- Minimum of 3 years of experience in IT governance, risk management, or compliance roles within the financial services industry.
- In-depth knowledge of IT governance frameworks, such as ISO27001, PDPA, GDPR, and industry-specific regulations (e.g., PCI DSS).
- Strong understanding of data governance principles, including data classification, data lifecycle management, and data protection mechanisms.
- Excellent communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams and senior stakeholders.
- Proven track record of driving compliance initiatives and implementing best practices to enhance IT governance capabilities.
- Ability to adapt to a fast-paced environment and manage multiple priorities effectively.
- Thai native speaker
Argyll Scott Asia is acting as an Employment Agency in relation to this vacancy.
