Chuenkamon Yommarat

CHUENKAMON YOMMARAT

Senior IT Auditor | IT Governance | GRC & Compliance | ISO 27001 Lead Auditor | Cybersecurity & PDPA

Detail-oriented IT Professional with over 10 years of experience in IT operations, transitioning into a specialized role in IT Internal Audit and Compliance for the past 3 years. Certified ISO/IEC 27001:2022 Lead Auditor with a proven track record in risk assessment, internal auditing, and ensuring alignment with regulatory standards. Possesses a solid technical foundation in IT infrastructure and system administration, enabling a deep understanding of technical controls and governance.

Committed to driving process improvement and strengthening IT security frameworks.

Core Competencies

• Audit & Compliance: IT Internal Audit, Risk Management, ISO Standards (27001, 9001), Regulatory Compliance, SOP Development.
• Technical Skills: IT Infrastructure, Network Administration, Jira, GLPI, SharePoint, Active Directory, Server Management.
• Soft Skills: Project Coordination, Problem Solving, Interpersonal Communication, Attention to Detail.

Open to opportunities in IT Audit, GRC, Compliance, Cybersecurity Governance, and related roles in large enterprises.

Senior IT Internal Auditor — MBK Public Company Limited

Nov 2024 – Present

Conduct ITGC and cybersecurity audits for HQ and affiliates

Assess access control, logging, and compliance gaps

Prepare audit reports with risk ratings

Coordinate remediation with IT and security teams

Senior Supervisor – IT Internal Audit — AEON Thana Sinsap (Thailand) PCL

Dec 2023 – Nov 2024

IT audits across HQ, branches, and subsidiaries

Performed risk assessment, planning, walkthroughs, and testing

Presented audit findings and tracked corrective actions

Senior IT Compliance — Dohome PCL

Feb 2023 – Nov 2023

Developed IT compliance framework and governance standards

Conducted IT risk assessments and system reviews

Created SOPs and regulatory documentation

Project Coordinator (Outsourced to Fujitsu) — CVG Outsourcing Co., Ltd.

Oct 2021 – Jan 2023

Coordinated incidents, RCA, and change requests via JIRA

Prepared weekly/monthly project performance reports

Supported cross-department communication

Supervisor – IT — P.P. Ontime Co., Ltd.

Aug 2021 – Oct 2021

Supported IT security operations

Managed GLPI ticketing system and documentation

Supervisor – IT — Global Service Center Co., Ltd.

Mar 2014 – Jul 2021

Managed AD, servers, firewalls, antivirus, network

Supported ISO audits and BCP implementation

Maintained web/mail security

Work Experience

MBK Internal Audit Co., Ltd.| Nov 2024 – Present

• Conducted IT audits for head office and affiliates to ensure compliance.
• Participated in risk assessments, audit planning, and findings documentation.
• Prepared audit reports and working papers and handled special assignments.

Senior Supervisor - IT Internal Audit

AEON Thana Sinsap (Thailand) PCL | Dec 2023 – Nov 2024

• Conducted IT audits for head office, branches, and affiliates to ensure compliance.
• Participated in risk assessments, audit planning, and findings documentation.
• Prepared audit reports and working papers and handled special assignments.

Senior - IT Compliance

Dohome PCL | Feb 2023 – Nov 2023

• Developed risk management strategies and compliance standards for IT operations.
• Conducted risk assessments, monitored IT governance, and led system reviews.
• Created SOPs and IT audit documentation to meet regulatory standards.

Project Coordinator (Outsourced to Fujitsu Thailand)

CVG Outsourcing Co., Ltd. | Oct 2021 – Jan 2023

• Managed change requests via JIRA, prepared reports, and monitored system performance.
• Coordinated incident handling and root cause analysis across departments.
• Summarized project outcomes in weekly/monthly reports.

Supervisor Officer – IT

P.P. Ontime Co., Ltd. | Aug 2021 – Oct 2021

• Maintained IT security systems and handled GLPI-based service tickets.
• Managed documentation for ISO certifications and system maintenance.

Supervisor Officer – IT

Global Service Center Co., Ltd. | Mar 2014 – Jul 2021

• Oversaw IT operations and administrative systems (e.g., Active Directory, Server).
• System Administration for Web Security, Mail Security, and Antivirus Server (Symantec)
• Network Administration (Network and Firewall)
• Develop and execute the Business Continuity Plan for backup site
• Supported ISO audits and created TOR for state tenders.
• Served as QMR and DCC for ISO9001:2015

Education

Bachelor of Engineering in Computer

Engineering University of Phayao |

Graduated: 2013 | GPA: 2.13

High School – Science-Math Program

Latyao Witthayakhom School | Graduated: 2008 | GPA: 2.75