Head of Operation Security and Resilience

Company Overview

We are a leading insurance company committed to providing financial protection and long-term value to our customers. With a strong presence in Thailand and a reputation for integrity, innovation, and customer-centricity, we offer a wide range of life insurance products tailored to meet diverse needs. Our mission is to empower individuals and families to achieve financial security and peace of mind through trusted insurance solutions. As part of our continued growth and commitment to excellence, we are seeking a seasoned professional to join our team.

What We Offer & Compensation

• Salary up to 220,000 THB
• Bonus Structure: Guaranteed bonus
• Additional performance‑based bonus
• Benefits: Executive‑level benefits package, including insurance coverage, leave entitlement, and other benefits in line with company policy
• Work Arrangement: Hybrid work environment, supporting flexibility and work‑life balance
• Career Development: Clear opportunities for professional growth, leadership development, and long‑term career progression at executive level

About the Role

We are seeking an experienced Head of Operation Security and Resilience to lead and strengthen our IT security and cyber resilience capabilities. This role is responsible for driving IT security programs, managing security risks and incidents, ensuring regulatory compliance, and partnering with cross-functional teams to embed security across business and technology initiatives.

Key Responsibilities

• Lead and oversee the successful implementation of IT Security programs to meet regulatory requirements, internal policies, and industry standards.
• Conduct ongoing assessments of IT Security controls and recommend improvement plans to address identified gaps.
• Drive continuous IT Security awareness programs through various channels, including e-Learning, regular briefings, circulars, and email alerts.
• Monitor and respond to IT Security threats and alerts.
• Evaluate new projects and collaborate with cross-functional teams to ensure information security requirements are defined, documented, tested, and delivered as part of project outcomes.
• Lead IT Security implementations and deploy security controls that support business needs while minimizing risk.
• Monitor emerging threats and vulnerabilities, assess their potential impact, and drive appropriate response actions.
• Act as the primary point of contact during security and privacy incidents and ensure related processes and response plans are maintained.
• Manage Digital Risk Management (DRM) and risk assessments to identify risks, define mitigation activities, and conduct analysis, reviews, and follow-up actions with Operational Risk and Executive stakeholders.
• Support audit activities and drive remediation efforts to address audit findings.

Qualifications / Requirements

• Bachelor’s degree or higher in Computer Science, Computer Engineering, or a related field.
• Minimum 5 years of experience in IT Security or Cybersecurity, including at least 3 years in IT leadership roles with increasing levels of responsibility.
• Strong knowledge of Thailand’s information security regulations and security standards, including PDPA, NIST, ISO 27001, ISO 27701, and PCI DSS, with hands-on implementation experience.
• Knowledge of IT Automation, DevOps, Microservices, and Cloud technologies.
• Professional IT Security or Cybersecurity certifications are advantageous, including ISO 27001, CISSP, CISM, CEH, or OSCP.
• Excellent verbal and written communication skills in both English and Thai.