Information Security Officer F/H

Description de l'entreprise

BRED IT (Thailand) Ltd.is a wholly owned subsidiary of the French bank BRED Banque Populaire based out of Paris (BPCE Group).

BRED IT was established in 2008 with the objective to become the IT hub for BRED Group Commercial Banks in South East Asia, Pacific Ocean, and the Horn of Africa areas.

In parallel, BRED IT has expanded its activities since 2011 to also provide remote IT services to Paris Headquarters.

Today, with more than 250 employees, BRED IT fully supports Banque Franco Lao in Laos, BRED Bank Cambodia, BRED Bank Vanuatu, BRED Bank Solomon Islands, BRED Bank Fiji and Banque pour le commerce et l’industrie Mer Rouge (BCIMR) in Djibouti:

BRED IT hosts and manages all layers of BRED International Banks Information Systems: From Infrastructures to Applications (Core Banking, Internet/Mobile Banking, E-Payments…), on a 24x7 basis.

Half of the activity is currently performed for BRED Headquarters, with a focus on Projects (built with Java, COBOL, PHP, DataStage) and Production/Devops.

We are a unique company, thanks to our identity and our history: We place our expertise at the service of BRED Group and develop our activities with an entrepreneurial structure.

By putting BRED group best interests first, it allows us to deliver tailor-made solutions with high value-added.

Poste et missions

BRED IT Thailand is looking for an Information Security Officer in Bangkok.

Missions :

For BRED IT (Thailand), BRED France and BRED Banks within APAC zone (Laos, Cambodia, Fiji, Vanuatu, Solomon Islands):

• Member of second line of defense team, which reviews the actions of the first line of defense (operational IT team) and analyzes the impact of those actions to determine their effectiveness in mitigating cyber risks
• Ensure the operational application of the Group's Information Security Policy (ISP) within its scope and to report any discrepancies identified in the entities,
• Coordinate BRED IT's security work between the various IT teams
• Update annually the operational entity's security risk analysis in relation to the IT teams
• Carry out security reviews on projects and monitor customer audits,
• Report security incidents to management and then monitor action plans,
• Perform the necessary monthly reporting to the CISO,
• participate in the permanent control work of ISS
  
  

Profil et compétences requises

Experience :

• A first experience in IT field is required.
  
  

Personal Competencies:

• The candidate should be trained in IT Security.
• Deep knowledge of at least one field of cybersecurity (governance of cybersecurity, network security, secure coding, endpoint security, configuration hardening, AD security…) and good knowledge of the others.
• Strong analytical skills and excellent synthesis skills: He/she is able to cross-check multiple sources of information on technical matters to produce synthesis for non-specialists.
  
  

Soft skills:

• Ability to interact with non-specialists on a daily basis
• Communication skills and ability to present his/her work to potentially large audiences
• Curiosity and willingness to keep track with technical evolutions
  
  

Education:

Minimum Bachelor’s degree BSc. Computer Science.

Language skills:

• Good command in English.
• Good command in French mandatory for this position.
  
  

Informations complémentaires sur le poste

Local contract