Location | : | Sai Noi, Thailand |
Job type | : | Permanent |
Salary | : | 80-100k |
Our client, a global leader in the agricultural sector known for its innovation and commitment to sustainability, is seeking a Lead-Security Technologies. This pivotal role will be part of the Security function within the Group Information Technology function. They will report directly to the Group Manager of Enterprise & Cloud Security.This role serves as a technical lead, overseeing and taking ownership of the successful design and implementation of security technologies and projects at East-West Seed. It is a strategic position responsible for designing, implementing, and managing security solutions to protect the organization’s IT infrastructure, applications cloud environments, and overall cybersecurity posture.Responsibilities:Security Technologies
Lead the design, implementation, and management of security technologies, including Identity and Access Management (IAM), Privileged Access Management (PAM), Security Information and Event Management (SIEM), and Endpoint Detection & Response (EDR).
Ensure seamless integration of security tools to enhance monitoring, detection, and response capabilities.
Continuously evaluate and optimize security technologies to align with evolving threats and business needs.
Infrastructure and Cloud Security
Implement and enforce security controls for on-premise infrastructure (Network, Firewall, Identity platform) and cloud environments (GCP, AWS, Azure).
Ensure cloud security best practices, including zero-trust architecture, secure access controls, and workload protection.
Work closely with IT teams to harden infrastructure & application configurations and reduce the organization's attack surface.
Service Management & Governance
Ensure security services align with business requirements and follow ISO 27001:2022, NIST framework 2.0, ITIL and service management best practices.
Oversee incident management, problem resolution, and change management for security-related services.
Establish and maintain comprehensive documentation for design, implementation, and configuration ready for handing over to the ICT operation team.
Conduct access reviews and audits regularly and participate in risk management and audit sessions.
Stay up-to-date with the latest Cloud, IAM and PAM technologies, trends, and best practices with knowledge sharing with the related teams.
Work cross-functionally with relevant ICT teams (e.g., Infrastructure and Digital applications) to enable service integrations, complying with security-by-design principles.
Key deliverables & success factors
Implementation & Optimization of Security Technologies through the successful deployment and integration of IAM, PAM, SIEM, EDR, SASE, UEMs and other security solutions, ensuring enhanced security, monitoring, detection, response capabilities, and compliance
Strengthening security controls across on-premise and cloud environments by implementing best practices, reducing attack surfaces, and enforcing zero-trust architecture.
Ensuring security governance, risk management, and compliance (ISO 27001:2022) while aligning security operations with ITIL best practices to improve incident response and operational efficiency
Qualifications:
Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
ICT Certificates ○ CompTIA A , Network or Security or CCNA or CCSA and ○ Certified Solution Architect of AWS, Azure, or GCP
5 years of experience in IT security, cybersecurity operations, or security architecture.
Strong background in infrastructure-related roles, with a solid foundation in IT systems, networking, and security (preferred).
Expertise in cloud security (GCP, AWS, or Azure) (preferred).
Proficiency in managing Microsoft Entra ID and other cloud identity and access management solutions, with hands-on experience in Microsoft Entra ID.
Hands-on experience with PAM solutions (BeyondTrust, CyberArk, Delinea, etc.).
Familiarity with compliance frameworks such as ISO 27001, NIST, and ITIL.
Experience with cloud security frameworks such as CIS Benchmarks and NIST guidelines.
Relevant certifications (CISSP, CISM, CEH, or equivalent) are a plus.