Overview
Pitch, proof, research, write documents, try, implement, plan and deliver Security and Compliance solutions to our corporate and enterprise customers. Your work will enable our customers--to comply with internal, national, regional, and industry-specific requirements, compliance, and risk management. Mainly your work will be technical enablement of multiple security products (e.g., Microsoft, Rapid 7, Trend Micro, McAfee, Forcepoint, OneTrust, Acronis, SentinelOne, Crowdstrike) through the framework e.g., NIST CSF, ISO/27001, or CIS. This is 60% blue-team and 40% red-team role.
What You Will Do
- Help our customers technology, audit, risk, and compliance team to create a cloud security journey and compliance roadmap. Perform technical testing, proof of concept, pre-sales activities, product research, and advisory to team and customers.
- Perform security introduction, assessment, gap analysis, remediation plan, technical implementation plan, change management and security adoption to our customer based on key security, audit and compliance framework e.g. CIS Control, GDPR, ISO/IEC 27001, ISO/IEC 27701, NIST 800-53, and especially Thailand Personal Data Protection Act (PDPA)
- Be a security and compliance products owner, working along, mostly, with Microsoft and also technology vendors for the go-to-market plan, ensure the healthy partner status, and success of a partnership ecosystem
- Training, coaching and mentoring sales and engineer teams in the security framework and privacy framework
What You Will Need
- Proven solid understanding of information security standards, technics, tools & methodologies
- Technical background and hands-on experience with any of security products (e.g., Microsoft, Rapid 7, Trend Micro, McAfee, Forcepoint, OneTrust, Acronis, SentinelOne, Crowdstrike)
- Proven records of architecting, implement security, audit and compliance solutions
- Experience in working with enterprise IT team, IT audit, security audit or IT governance project
- Knowledge in EU General Data Protection Regulation (GDPR), Thailand Personal Data Protection Act (PDPA)
- Strong skill in managing and creating breathtaking Word, Excel, and PowerPoint for executives level
We will require you to have
- Earned at least 2 of Microsoft 365 Security related certificates: Security Administrator Associate (MS-500), Azure Security Engineer Associate (AZ-500), Microsoft Security Operations Analyst (SC-200), Microsoft Identity and Access Administrator (SC-300), Microsoft Information Protection Administrator (SC-400)
Bonus if you have
- Experience with security, audit and compliance contexts e.g., PCI, SOC2, SOX, and ISO standards
- Earned any of security, audit, and compliance-related certification e.g., Associate of (ISC), CISSP, CISA, CRISC, CISM, CompTIA Security+, ISO/IEC 27001
- Experience with Microsoft Solutions e.g., Azure, Microsoft 365, Office 365, Enterprise Mobility and Security (EMS) e.g. Azure Active Directory, Intune, Azure Information Protection, Microsoft Cloud Apps Security
- Earned any of Microsoft 365 or Microsoft Security related certificates (MS-500: Microsoft 365 Security Administration, AZ-500: Microsoft Azure Security Engineer)
- Earned related security certification issued by ISACA or Cybersecurity Nexus (CSX) e.g., CSX-P - Cybersecurity Practitioner Certification, CISM - Certified Information Security Manager, CDPSE - Certified Data Privacy Solutions Engineer
Perks And Benefits
- Flexible working time, flexible working location including work from home option
- Traveling cost support
- Access to tools and knowledge of Microsoft technology and Microsoft communities
- Opportunities to work with leading Thai and international company
- Medical coverage and life insurance
Base Working Location
Samyan Mitrtown
**Do not hesitate if your qualifications do not match all of our criterias. Submit your CV and we can talk about your career plan together **
