Implements IT security improvements by assessing current situation; evaluating trends; anticipating requirements.
Protects IT system by defining access privileges, control structures, and required resources.
Process & analyze to gain insights on past IT areas on, current or potential attacks and threats that pose a risk to the organization.
Primary point of contact with Internal Audit.
Periodically review, update, implement and communicate changes to IT policies and procedures and General IT Controls.
Facilitate internal and external audit processes by participating in scoping discussions and walk-throughs, delivering evidence that controls are operating as defined, remediating deficiencies, and acting on recommendations.
Safeguards IT infrastructure and system as well as information system assets by identifying and solving potential and actual security problems.
Research cyber security topics and promote Cyber security awareness throughout Thaioil.
Experience
Relevant experience, especially in IT working environment
Understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth, and common security elements.
Hands-on experience analyzing high volumes of logs, network data (e.g., Netflow, FPC), and other attack artifacts in support of incident investigations.
Experience with vulnerability scanning solutions
Familiarity with Vulnerability Management program.
Proficiency with any of the following: Anti-Virus, HIPS, ID/PS, Full Packet Capture, Host-Based Forensics, Network Forensics, and RSA Security
Have knowledge of architecture, engineering, and operations of at least one enterprise SIEM platform
Understanding of mobile technology and OS (i.e., Android, iOS, Windows), VMware technology, and Unix and basic Unix commands
Qualifications
Bachelor's degree in computer science, Information Systems, or equivalent education or work experience
