(Senior) Officer, Cybersecurity

PTTEP (Bangkok City, Thailand)

Bangkok, Thailand

PTT Exploration and Production Public Company Limited (PTTEP) A PTT Group Company PTTEP is Thailand’s petroleum Exploration and Production Company, was established on 20 June 1985 according to the intention of the Cabinet to establish a highly flexible organization to manage the exploration and production of petroleum for maximum benefit of the country’s economy. For more than 30 years, PTTEP has invested in major petroleum exploration and production projects in Southeast Asia, the Middle East, North Africa, Australasia and North America. Furthermore, PTTEP has introduced unconventional E&P business in the company’s operations, such as the Floating Liquefied Natural Gas Production: FLNG, the investment in Oil Sands fields, and the invention of new strategies and technologies to increase the volume of production and petroleum reserve as well as to increase the strength of the company and Thailand in the long run.

Detail posisi

(Senior) Officer, Cybersecurity is responsible for developing and implementing a comprehensive cybersecurity strategy, conducting proactive security activities, managing cybersecurity operations, supporting audit processes, and overseeing data management. This role ensures the protection of the organization’s information assets through integrated risk management, continuous assessment, and strategic planning.

Kewajiban

• Develop and implement a comprehensive cybersecurity strategy.
• Conduct integrated risk management and assessments to identify and mitigate potential threats.
• Develop and maintain security policies, standards, and guidelines.
• Perform vulnerability assessments (VA) and penetration testing (PEN test) to identify and address security weaknesses.
• Lead Red Team exercises and manage attack surface management to proactively identify potential threats.
• Conduct threat hunting to detect and mitigate advanced threats.
• Oversee patch governance to ensure timely updates and security patches are applied.
• Manage and implement cybersecurity projects, ensuring they are completed on time and within budget.
• Oversee the Security Operations Center (SOC) to monitor and respond to security incidents.
• Manage incident and crisis response, including the development and execution of incident response plans.
• Handle security contract management, ensuring all security-related contracts are properly managed and executed.
• Ensure the secure management of data across the organization.
• Develop and enforce data protection policies and procedures.
• Oversee data classification, encryption, and secure storage practices.
• Monitor data access and usage to prevent unauthorized access and data breaches.
• Support internal and external audits by providing necessary documentation and evidence of compliance.
• Maintain an information security risk register and assist with audit preparations and follow-ups.

Kualifikasi

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Relevant certifications such as CISSP, CISM, CEH, or equivalent.
• Proven experience in cybersecurity strategy development, risk management, and security operations.
• Strong knowledge of security frameworks and standards (e.g., NIST, ISO 27001).
• Experience in managing Security Operations Centers (SOC).
• Experience in managing complex security projects.
• Excellent problem-solving and analytical skills.
• Strong communication and stakeholder management abilities.
• Excellent command of Thai/English and ability to effectively communicate at all levels (written and verbal).