search Browse Jobs
Technology Consulting - Cyber Security (Consultant to Senior)EY · Bangkok, Bangkok City, Thailand
EY logo

EY

company page ↗

Technology Consulting - Cyber Security (Consultant to Senior)

🗓️ Posted 2026-10-05 Bangkok, Bangkok City, Thailand Full-time Hybrid ICT
💰 Salary Not shared 📊 Market THB 45,000–THB 85,000/mo

About the Company

At EY, you'll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we're counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. To better reflect this, 'The exceptional EY experience. It's yours to build.' is our new promise to our people.

About the Role

EY is committed to doing its part in building a better working world. The insights and quality services we deliver help build trust and confidence in the capital markets and in economies the world over. We develop outstanding leaders who team to deliver on our promises to all of our stakeholders. In so doing, we play a critical role in building a better working world for our people, for our clients and for our communities. Cybersecurity Team Provide end-to-end services to secure digital infrastructure and data, including strategy design and implementation, vulnerability testing, compliance, assurance, and operational management Your Key Responsibilities Perform cyber security and IT security assessments for clients (e.g. cyber security program assessment, cyber security risk assessments, IT network infrastructure reviews, system technical configurations review, information security policies and processes/procedures review etc) Work on IT security design, analysis and implementation of security protection solution. Evaluate and analyze threat, vulnerability, system weakness, impact and risk to security issues discovered from security assessments like Vulnerability Assessment (VA), Penetration Testing (PenTest), etc Advise clients on the security issues, including explanation on the technical details and how they can remediate the vulnerabilities in the processes, controls and systems. Advise client on the security incident response end-to-end process (i.e. preparation, detection, analysis, response and recovery of the security incident).

Responsibilities

  • ● Perform cyber security and IT security assessments for clients (e.g. cyber security program assessment, cyber security risk assessments, IT network infrastructure reviews, system technical configurations review, information security policies and processes/procedures review etc)
  • ● Work on IT security design, analysis and implementation of security protection solution.
  • ● Evaluate and analyze threat, vulnerability, system weakness, impact and risk to security issues discovered from security assessments like Vulnerability Assessment (VA), Penetration Testing (PenTest), etc
  • ● Advise clients on the security issues, including explanation on the technical details and how they can remediate the vulnerabilities in the processes, controls and systems.
  • ● Advise client on the security incident response end-to-end process (i.e. preparation, detection, analysis, response and recovery of the security incident).

Requirements

  • ● Bachelor's or Master's degree in Management Information Systems (MIS), Computer Engineering, Computer Science, Cybersecurity, Information Systems, IT Security, ICT, or a related field.
  • ● Minimum 2 years of experience in cybersecurity, IT security management, IT security assessment, IT audit, or related areas.
  • ● Experience in cybersecurity assessment frameworks and standards, such as NIST Cybersecurity Framework (NIST CSF), ISO/IEC 27001, IT Audit, or other related methodologies.
  • ● Familiarity with leading cybersecurity processes, frameworks, and security tools.
  • ● Strong technical background in information security, including security design, implementation, and assessment.
  • ● Experience in project planning and project management would be an advantage.
  • ● Experience in modern cybersecurity practices, such as DevSecOps, penetration testing, red teaming, and system resilience design.
  • ● Knowledge of emerging technologies and their security implications, including Cloud Computing, Blockchain, Big Data, Artificial Intelligence (AI), and Machine Learning (ML).
  • ● Professional certifications are preferred, such as Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), ISO/IEC 27001 Lead Auditor, Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP), or Offensive Security Certified Professional (OSCP).
  • ● Highly proficient in both Thai and English, with excellent written and verbal communication, analytical, and problem-solving skills.
  • ● Having experience in project planning and management will be a plus.
  • ● Professional certifications such as Offensive Security Certified Professional (OSCP), Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP), and / or Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), or ISO27001 will be highly considered
  • ● Experience in new generation security practices (i.e. DevSecOps, iPentest, RedTeaming, System Resilience Design)
  • ● Experience in Emerging Technologies (i.e. Cloud Computering, Blockchain, Big Data, A.I./M.L.)

Benefits

  • ● Continuous learning: You'll develop the mindset and skills to navigate whatever comes next.
  • ● Success as defined by you: We'll provide the tools and flexibility, so you can make a meaningful impact, your way.
  • ● Transformative leadership: We'll give you the insights, coaching and confidence to be the leader the world needs.
  • ● Diverse and inclusive culture: You'll be embraced for who you are and empowered to use your voice to help others find theirs.