Junior GRC

Company Description Bangkok MSP (BMSP) is a leading IT Security Managed Service Provider in Thailand, specializing in cloud-based subscription solutions and globally recognized security services. The company protects organizations of all sizes and industries from evolving cyber threats through tailored, cost-effective offerings. BMSP focuses on understanding each client’s unique risk profile and business needs to deliver practical and scalable security outcomes.

Team members work with modern technologies and international best practices, contributing to a dynamic and growth-oriented environment.

Role Description The Junior GRC (Governance, Risk, and Compliance) role is a full-time, hybrid position based in Bangkok, with the flexibility to work from home part of the time. This role supports the development, implementation, and maintenance of information security policies, procedures, and standards under guidance from senior team members. Day-to-day tasks include assisting with risk assessments, tracking remediation activities, helping document controls, and maintaining compliance records and reports.

The Junior GRC professional will participate in audits and security reviews, collect evidence for regulatory and client requirements, and help monitor adherence to internal frameworks. The role also involves collaborating with technical and business teams, updating documentation, and contributing to continuous improvement of BMSP’s security and compliance posture.

Qualifications

• Foundational knowledge of governance, risk management, and compliance (GRC), including basic understanding of security policies, controls, and frameworks (e.g., ISO 27001, NIST, or similar).
• Ability to perform structured analysis and documentation, including creating reports, process descriptions, and risk or issue logs with attention to detail.
• Strong written and verbal communication skills, with the ability to clearly summarize technical or compliance topics for different audiences.
• Collaborative mindset and ability to work effectively with cross-functional teams, including security, IT operations, and business stakeholders.
• Good organizational and time-management skills, with the ability to prioritize tasks, follow procedures, and meet deadlines.
• Bachelor’s degree or equivalent experience in Information Security, Computer Science, Business, or a related field; recent graduates are encouraged to apply.
• Interest in building a career in cybersecurity and GRC, with willingness to learn and pursue relevant certifications (e.g., ISO 27001 Foundation, CompTIA Security+, CRISC or similar in the future).
• Comfort working in a hybrid environment based in Bangkok, with reliable connectivity and readiness to join on-site meetings as required.