Section Manager - Security Operation (Lotus Office)
CP Axtra · Bangkok
You will balance exceptional delivery for customers on what matters, engaging teams and colleagues, with the needs of the business. You are an expert and often the first layer of management of people or projects.
Responsibilities
- Contribute security guidance and operation best practice to colleague and partner.
- Ensuring security control and compliance applied to all company environment
- Operate and monitor security tools eg. Antivirus, VA scan, WAF, PAM, DNS, Certificate, Firewall and Proxy
- Manage and support security request and security incident through ITSM.
- Problem analysis skill and root cause analysis is mandatory
- Manage system inventory and changed management for security operation related
- Identify security gaps in existing and proposed architectures and recommend changes or enhancements
- Collaborate with IT teams for ongoing external and internal audit assessment to ensure the controls are effective and meet regulatory and legal requirements
- Other Security Operation related tasks as assigned.
Requirements
- A Bachelor's or associate degree in IT, Computer Science, or related field.
- 2 years of experience in security design, operation or implementation
- IT security certifications may be advantageous.
- A strong working knowledge of current IT risks, security implementations, and computer operating and software programs.
- The ability to interact with a wide range of people from different backgrounds and races.
- Excellent problem-solving, communication, and interpersonal skills.
Operational skills relevant for this job
- You should have expertise in security measures such as firewalls, intrusion detection, and prevention systems (IDS/IPS), network access controls, and network segmentation.
- You must be experienced with operating systems like Windows, Linux, and UNIX.
- Strong ability to analyze user requirements, make recommendations and implement solution
- Ability to prioritize and execute in high-pressured environment
- Understanding of information security principles and best practice (e.g., ISO27001, PCIDSS, OWASP and GDPR/PDPA)
- Ability to present security topics to a non- technical audience and presenting the business value of security
- Good interpersonal skills with the ability to build and influence teams; and self-motivated
- Third-party auditing skills and risk assessment methodologies.
Benefits