Do you have a passion for safeguarding critical infrastructures and securing both IT and OT environments? We’re looking for a proactive and strategic AVP of IT Security to join our group company based in Thailand, where you’ll lead the charge in protecting organization’s digital and operational assets.
Key Responsibilities
- Design and implement the security architecture and strategy for both OT and IT environments, aligning with overall business objectives.
- Lead the identification, analysis, and mitigation of cyber risks affecting IT and OT systems, ensuring robust defense mechanisms are in place to protect critical infrastructure.
- Implement and oversee cybersecurity programs, monitoring for potential threats, vulnerabilities, and breaches across all IT and OT platforms.
- Ensure all systems and processes comply with relevant security regulations, standards (such as ISO 27001, NIST, etc.), and industry best practices. Lead internal and external security audits, ensuring compliance with both local and global regulations.
- Develop and lead the incident response strategy, ensuring prompt and effective response to any IT or OT security breaches, including root cause analysis and remediation plans.
- Work closely with IT, OT, and engineering teams to ensure security policies are consistently applied and that the architecture remains resilient.
- Establish and maintain IT and OT security policies, processes, and procedures across the group company, ensuring strict adherence by all business units.
- Lead security awareness programs and training initiatives to educate employees across the company on cybersecurity best practices.
- Evaluate, recommend, and implement security tools, technologies, and software to enhance cybersecurity measures for both IT and OT environments.
- Conduct security assessments of third-party vendors, ensuring that their practices align with the company’s security policies and standards.
- Lead initiatives that securely integrate IT and OT systems, ensuring that data flows and operational processes are protected from cyber threats.
Required Skills & Experience
- Bachelor’s degree in Information Security, Computer Science, Engineering, or a related field. Master’s degree or industry certifications (e.g., CISSP, CISM, CISA) is highly desirable.
- Minimum of 8+ years in IT/OT security management, cybersecurity, or related fields, with significant experience managing security within an OT environment (manufacturing, utilities, etc.).
- Proven experience designing, implementing, and maintaining cybersecurity programs that span both IT and OT.
- Deep knowledge of security technologies (firewalls, intrusion detection/prevention systems, SIEM, etc.) as well as OT-specific security protocols and practices.
- Understanding of cyber risk management, incident response, and forensic analysis for both IT and OT systems.
- Familiarity with OT-specific frameworks such as ISA/IEC 62443 and IT standards such as ISO 27001, NIST, and others.
- Strong background in auditing, compliance, and regulatory frameworks, with the ability to lead internal and external audits effectively.
- Excellent communication and leadership skills to influence stakeholders and lead cross-functional teams in a complex, multinational environment.
- Strong analytical and problem-solving capabilities, with the ability to assess complex security issues and deliver effective solutions.