Information Technology & Cybersecurity Manager

About STT GDC

Be part of a global leader in data centre solutions

ST Telemedia Global Data Centres (STT GDC) is a data centre provider headquartered in Singapore, with a global footprint in major business markets across Singapore, the United Kingdom, Germany, Italy, India, Thailand, South Korea, Indonesia, Japan, the Philippines, Malaysia and Vietnam. We harness cutting-edge technology to deliver a comprehensive suite of world-class, scalable and flexible data centre solutions, including connectivity and support services, designed to meet the evolving colocation needs of today and tomorrow. By joining our team, you’ll be part of a dynamic, fast-growing industry that forms the cornerstone of today’s digital world.

Why STT GDC

STT GDC’s internal culture is built on creating a forward-thinking, socially responsible environment that ignites positive change. We empower our employees to thrive in a workplace defined by excellence, innovation and growth, where collaboration and creativity can flourish.

✨ Empathy-driven culture: We lead with compassion and understanding, fostering a supportive and inclusive environment that values your well-being and voice.

🌟 Collaborative and vibrant workplace: We celebrate diversity and the power of teamwork. We value every idea and strive for constant improvement through collective innovation

📈 Opportunities for growth: At STT GDC, we don’t just offer roles – we cultivate long-term career pathways. Through professional development programs, mentorships and stretch assignments, we are committed to enabling you to grow and reach your full potential.

Role Summary

STTGDC Thailand is seeking an experienced IT Manager & Cyber Security to lead day-to-day IT operations while owning the cyber security strategy and controls for our Thailand operations. This is a hands-on leadership role covering infrastructure and end-user services, security governance & compliance, threat management/IR, and vendor/stakeholder management. The ideal candidate has a strong track record running reliable, secure IT environments in a regulated or data-center-adjacent context.

Key Duties and Responsibilities

1) IT Operations & Service Management

• Own the IT service lifecycle: incident, request, change, and problem management (ITIL).
• Ensure high availability & performance of network (LAN/WAN/Wi-Fi, VPN), servers (Windows/Linux), virtualization, storage, backup/DR, and end-user computing (Windows/Mac, collaboration suites like MS O365).
• Lead asset & configuration management, software license governance, and lifecycle refresh (SLA/OLA, CMDB hygiene).
• Manage IT Support (outsourced), set SLAs, coach team/partners, and drive first-call resolution and user satisfaction (CSAT).
• Plan and execute infrastructure upgrades, patching windows, and capacity planning.
• Budgeting & cost optimization for IT services and cloud services.

2) Cyber Security Ownership

• Define and maintain security policies, standards, and procedures aligned to frameworks (e.g., ISO/IEC 27001, NIST CSF, CIS Controls) and Thailand PDPA.
• Oversee identity & access management (IAM), least privilege, MFA, joiner/mover/leaver processes; review privileged access (PAM).
• Coordinate with SOC/MDR for threat monitoring, triage, incident response, and post-incident reviews.
• Govern vulnerability management: scanning cadence, risk-based remediation SLAs, patch compliance reporting.
• Implement and tune endpoint protection/EDR, email security, web filtering/DLP, SIEM log sources, and security hardening baselines.
• Lead Business Continuity & Disaster Recovery (BC/DR) exercises, tabletop IR drills, and crisis communications.
• Conduct risk assessments, third-party/vendor security due diligence, and security awareness training.

3) Compliance, Audit, & Governance

• Drive readiness and evidence management for internal and external audits (e.g., ISO 27001, SOC 2, PDPA readiness, PCI DSS).
• Maintain documentation: policies, risk register, data inventory/flows, and control testing evidence.
• Report security posture and KPIs to leadership and relevant committees.

4) Projects & Stakeholder Management

• Lead or support technology projects (e.g., network refresh, zero trust rollout, cloud migrations, M365 security uplift).
• Manage vendors/MSPs: contracts, SLAs, security addenda, renewals, and performance governance.
• Partner with Facilities/DC Ops, HR, Legal, and Compliance for physical–cyber integration (badging, CCTV, access logs, visitor workflows) where required.

Requirements

• Bachelor’s degree in computer science, Information Systems, Engineering, Cybersecurity, or related field (or equivalent experience).
• 7–10+ years in IT infrastructure/operations with 3+ years direct responsibility for cyber security controls and incident handling.
• Strong hands-on experience with:
• Networking: VLANs, routing, firewalls, VPN, SD-WAN.
• Systems: Windows Server/AD, Azure AD/Entra ID, Linux, virtualization (VMware/Hyper-V), backup/DR.
• Cloud & SaaS: Microsoft 365, Azure fundamentals, email security, identity/MFA/SSO.
• Security: EDR, SIEM, vulnerability management, IAM/PAM, DLP, encryption, secure configuration baselines.
• Solid understanding of ISO 27001, NIST CSF, CIS Controls, and Thailand PDPA.
• Proven ability to lead MSPs/vendors and deliver against SLAs.
• Strong communication in English and Thai; ability to write policies and present risk/impact to non-technical stakeholders.

Preferred / Nice to Have

• Certifications (one or more): CISSP, CISM, CRISC, ISO 27001 LA/LI, Security+, CCSK/CCSP, ITIL v3/v4, Microsoft (AZ-900/SC-900/SC-200/MD-102), Cisco (CCNA/CCNP), Fortinet.
• Experience in data centers, finance, telecom, manufacturing, or other regulated environments.

Tools & Environment

• Identity & Productivity: Microsoft 365/Entra ID, Intune, Exchange Online,SharePoint/OneDrive, Teams.
• Security: Defender EDR, SIEM (e.g., Sentinel/Splunk), email security gateway, DLP, vulnerability scanners (e.g., Qualys/Tenable).
• Infra: Windows Server/AD DS, Linux, VMware/Hyper-V, Azure, firewalls (Fortinet), SD-WAN.
• ITSM: ServiceNow/Jira/ManageEngine (ITIL processes).

Applicants must be legally authorized to work in Thailand without current or future visa sponsorship.