IT and Cyber Threat Operational Risk Management

The role manages operational risk associated with cyber threats and IT within the bank. Responsibilities include designing risk-management tools and processes, assessing risks with business units, monitoring and controlling risks against risk appetite, preparing management reports, and establishing policies, guidelines, procedures, and manuals.

The position requires a bachelor’s or master’s degree in information technology, IT management, computer science, computer engineering, or a related field, plus at least three years of experience in risk management, IT management, or IT security. Candidates need bilingual English and Thai communication, collaboration with business and technical teams, strong analytical and detail-oriented skills, and knowledge of NIST or ISO 27001 frameworks and risk-assessment methods. CRISC, CISA, or CISM credentials or experience are advantageous.

Design and develop tools and processes for cyber and IT operational risk management.

Collaborate with business units to identify, analyze, and assess cyber threat and IT operational risk impacts.

Monitor, review, and control cyber and IT operational risks within acceptable risk appetites.

Prepare cyber and IT operational risk positions and report to management.

Establish policies, guidelines, procedures, manuals, and training aligned with shared risk-management responsibilities.

Bachelor’s or master’s degree in information technology, IT management, computer science, computer engineering, or a related field.

At least three years of experience in risk management, IT management, or IT security.

Strong verbal and written communication skills in English and Thai.

Ability to collaborate with business and technical teams to manage cyber risks.

Experience with cybersecurity frameworks such as NIST and ISO 27001, and with risk-assessment methodologies.