Commercial Banking IT and Cyber Threat Operational Risk Management

The role manages cyber threat and IT operational risk for Commercial Banking at Kiatnakin Phatra Bank Public Company Limited in Bangkok. Responsibilities include designing risk tools and processes, assessing major cyber and IT risk factors with business units, monitoring risks against risk appetites, reporting risk positions to management, and establishing relevant policies, guidelines, procedures, manuals, and training.

Candidates require a bachelor’s or master’s degree in information technology, IT management, computer science, computer engineering, or a related field, plus at least three years of experience in risk management, IT management, or IT security. The role also requires bilingual English and Thai communication, collaboration with business and technical teams, analytical and critical skills, attention to detail, and experience with cybersecurity frameworks such as NIST and ISO 27001 and with risk assessment methodologies. CRISC, CISA, or CISM certifications or related experience are advantageous.

Design and develop operational risk-management tools and processes for cyber and IT risks.

Collaborate with business units to identify, analyze, and assess key cyber threat and IT operational risk impacts.

Monitor, review, and control cyber and IT operational risks against acceptable risk appetites.

Prepare risk positions and report them to management.

Establish policies, guidelines, procedures, manuals, and training for cyber threat and IT operational risk management.

Bachelor’s or master’s degree in information technology, IT management, computer science, computer engineering, or a related field.

At least three years of experience in risk management, IT management, or IT security.

Strong verbal and written communication skills in both English and Thai.

Ability to collaborate with business and technical teams to manage cyber risks.

Analytical and critical skills with strong attention to detail; experience with NIST, ISO 27001, and risk assessment methodologies.