Department Manager - Governance, Risk & Compliance (GRC)

Balance exceptional delivery for customers on what matters, engaging teams and colleagues, with the needs of the business. We are looking for an expert who can be the first layer of management of people or projects.

Responsibilities

• Understand and interpret requirements across relevant IT Risk frameworks, map overlapping Technology policies and standards.
• Conduct Technology Risk Management, Help secure workflows, products, and operations across the company (Thailand & Malaysia) by identifying risk areas, providing recommendations on security compliance and IT governance best practices and authoring respective policies and procedures around security, data governance, and risk.
• Design, configure, and operate core security technologies, including Antivirus / EDR, Data Loss Prevention (DLP), and Vulnerability Assessment (VA) scanning tools, ensuring effective coverage and risk-based configuration.
• Oversee and coordinate the Vulnerability and Penetration Management Program, including risk prioritization, remediation tracking, and recommendation of appropriate mitigation solutions.
• Build & coordinate security awareness & training program for Thailand & Malaysia.
• Coordinate with internal audit, external audit and IT team to provide the information as audit request and update the current status of audit next step to IT management.
• Coordinate with Risk management in performin