Cyber GRC Consultant

About the Company

Responsibilities

• ● Conduct cyber risk assessments across product, platform, and data domains, aligned with applicable regulatory requirements and industry standards, and support remediation planning of identified risks
• ● Maintain and update security policies, standards, SOPs, and compliance documentation, including security requirements for third-party products and services
• ● Assist with internal and external audits, including evidence preparation, control walkthroughs, and issue tracking
• ● Support continuous compliance monitoring activities such as baseline checks and configuration validation
• ● Coordinate with engineering, product, and data teams to ensure policy adherence and control implementation
• ● Contribute to security awareness activities and governance reporting

Requirements

• ● Understanding of security frameworks and regulatory requirements (ISO 27001, PDPA, BOT, NCSA Cloud Security, NIST CSF)
• ● Ability to assess risks, controls, and cloud service configurations
• ● Familiarity with continuous compliance concepts and cloud governance practices
• ● Strong documentation, communication, and stakeholder coordination skills
• ● Experience supporting audits or compliance in a cloud or SaaS environment
• ● Exposure to cloud platforms (AWS/Azure/GCP) and modern DevOps workflows

Benefits

• ● Hybrid Working Arrangement
• ● World-Class Development Program
• ● Performance Bonus
• ● Vacation Leave 15 Days + Maternity Leave
• ● MacBook Provided
• ● Housing Loan
• ● Life Insurance/ Health Insurance/ Dental Care
• ● Jetts Fitness (Corporate rate and privilege)
• ● Opportunity to be a part of team that drives Thailand Digital Economy (The contributor of the great impact to millions of Thai people through digital platforms e.g. PaoTang App. and Krungthai Next App)