Manager - Cyber Security Engineer will work closely across business channels to identify and assess security risks, gaps in the application of policies and standards, weaknesses in processes and system controls. He or she will work closely with the wider team to deliver a number of group wide security improvement initiatives. This role will be working with AXA International Markets Office Security, AXA Global Security and Internal Krungthai-AXA Team such as IT Lead, Internal Auditors, Business Unit Head, Project Managers. Job Description: Identity & Access Management (IAM) & Privileged Access: Lead PAM governance, manage privileged access, and oversee identity lifecycle. Provide expertise on PAM tools (CyberArk) and implement strong authentication protocols. Support password security and role-based access recertification, addressing gaps promptly. Coordinate with global teams to align IAM practices. Security Incident Detection, Response, Monitoring & Orchestration: Developing and leading incident response strategies; managing Security Operations Centers (SOCs); implementing continuous monitoring, threat hunting, and fine-tuning SIEM, EDR, and log analysis tools to detect suspicious activities, investigate security breaches, and conduct proactive threat hunting. Leveraging Security Orchestration, Automation, and Response (SOAR) platforms to automate workflows, streamline incident handling, and improve response times. Cloud & Architecture Assurance: Review and validate cloud/hybrid architectures using SABSA, TOGAF standards. Verify cloud security controls, IAM policies, and infrastructure-as-code (Terraform, CloudFormation). Assess vulnerabilities and ensure compliance through security audits. System & Network Configuration Security: Conduct configuration reviews for systems and network devices (Windows, Linux, firewalls, VPNs). Verify compliance with standards (CIS, DISA STIGs, ISO, NIST, PCI-DSS). Automate checks and hardening processes using scripting (PowerShell, Bash). Regularly update firewall rules, network segmentation, and email security (SPF, DKIM, DMARC). Cyber Resilience & Crisis Management: Contribute to high-risk scenario planning, cyber resilience exercises, and forensic investigations. Manage external forensic vendors and participate as a crisis team member. Ensure lessons learned are integrated into security improvements. Web & Network Security: Oversee deployment of WAF, anti-DDoS, and network security controls. Conduct regular security monitoring, anomaly detection, and review of Shadow Cloud/AI risks. Manage web filtering and data leakage mitigation strategies. MythosAI: Lead MythosAI Taskforce in reviwing and providing feedback on security-relevant for Infrastructure, Server, Database, Network and Vendor Security. Vendor Security: Conduct Vendor Security Due Diligence, provide security requirements on RFP. Other: Assist in ISO27001 program implementation / Prepare reports on strategic KPIs and other agreed KPIs to Local CSO / Update knowledge and technical skill to cope with new vulnerability and threats Qualifications: Bachelor’s degree in Computer Science, Computer Engineering, Information Technology or IT related field. At least 7 years’ experience in information security, security consultancy, security tool implementation and/or IT security operations Experience in Identity & Access Management (IAM), Threat Detection/Security Monitoring and Cloud Security with AI Security are preferred Capable to analysis of security threats such as information technology, network intrusion on servers, spread of malware or violations of policy and operations staff. CISSP, CISA, GIAC, CEH, CompTIA, and/or Security+ certifications preferred Good interpersonal skills – able to communicate effectively with various levels (from end-users to executive). Good command of written and spoken English. Strong Computer literacy in using Microsoft Office and Microsoft Visio. About Krungthai-AXA Life Insurance Krungthai-AXA Life Insurance Public Company Limited, created from a solid co-investment partnership between Krungthai Bank PCL. and the AXA Group, global financial protection and asset-management specialists. The trademark of Krungthai-AXA Life Insurance is designed to indicate the combination of the two corporations. Krung Thai Bank PCL. and AXA Group logos are aligned with Thai characters displaying the company name as Krungthai-AXA Life Insurance placed above the red line and the new company signature. Redefining/Life Insurance. Today Krungthai-AXA Life Insurance Public Company Limited is a fast-growing life insurance company with a vision – Ambition AXA. Our Company Benefits Employee and Family Health Insurance Benefits Life and Accident Insurance Benefits Hybrid Working and Flexible Working Hours Annual Leave & Birthday Leave Salary Increment & Bonus Digital Learning - Self Learning Organization Annual Health Check up Provident Fund Flexible Benefits
