Team Lead Information Security Governance and Architecture Advisory

Job Summary

We are seeking an experienced Information Security professional to lead and strengthen the organization's cybersecurity and information security governance framework. This role is responsible for defining security strategies, architectures, and hardening standards to ensure the protection of critical business assets and compliance with regulatory requirements. The incumbent will conduct security assessments aligned with international standards and frameworks such as NIST, ISO 27001, and PCI DSS, provide security consulting for business and technology initiatives, and oversee the implementation and effectiveness of security controls and solutions.

The role also serves as a key liaison with regulators, industry organizations, external partners, auditors, and other cybersecurity-related authorities. Responsibilities include driving security awareness programs across the organization, managing security-related budgets, monitoring governance, risk, and compliance (GRC) activities, and ensuring timely remediation of audit findings and regulatory observations. The successful candidate will bring strong hands-on experience in information security, a deep understanding of banking and financial services regulations, and the ability to balance strategic planning with practical execution to enhance the organization's overall security posture.

Job Responsibilities:

• Define security strategies, security architectures, and hardening standards.
• Conduct security assessments based on security architectures, standards, and industry best practices/frameworks, including NIST, ISO, and PCI DSS.
• Develop and deliver security awareness training programs.
• Consolidate and interface with external organizations and authorities related to information and cybersecurity.
• Provide security consultation and recommendations for relevant banking projects.
• Manage and control the security budget.
• Coordinate with internal and external auditors, as well as monitor and follow up on audit findings and GRC (Governance, Risk, and Compliance) outcomes.
• Perform other duties as assigned.

Qualifications:

• Minimum of 8 years with hands-on information security
• Financial Services/Banking industry experience required
• Understand of regulation and industrial best practices.
• Experience to implement and hands on of Information security solution.
• Familiarity with compliance and governance requirement by Bank of Thailand or other regulatory.
• Demonstrate the ability to think strategically and drive tactical execution.
• Very good analytical and problem-solving skills
• Strong presentation and communication skills.
• Ability to work effectively as a member of a cross-functional team
• Cybersecurity certification including CISSP, CISM or related.