Chuenkamon Yommarat

CHUENKAMON YOMMARAT
Senior IT Auditor | IT Governance | GRC & Compliance | ISO 27001 Lead Auditor | Cybersecurity & PDPA

Detail-oriented IT Professional with over 10 years of experience in IT operations, transitioning into a specialized role in IT Internal Audit and Compliance for the past 3 years. Certified ISO/IEC 27001:2022 Lead Auditor  with a proven track record in risk assessment, internal auditing, and ensuring alignment with regulatory standards. Possesses a solid technical foundation in IT infrastructure and system administration, enabling a deep understanding of technical controls and governance. Committed to driving process improvement and strengthening IT security frameworks.

Core Competencies
• Audit & Compliance: IT Internal Audit, Risk Management, ISO Standards (27001, 9001), Regulatory Compliance, SOP Development.
• Technical Skills: IT Infrastructure, Network Administration, Jira, GLPI, SharePoint, Active Directory, Server Management.
• Soft Skills: Project Coordination, Problem Solving, Interpersonal Communication, Attention to Detail.

Open to opportunities in IT Audit, GRC, Compliance, Cybersecurity Governance, and related roles in large enterprises.

Senior IT Internal Auditor — MBK Public Company Limited
Nov 2024 – Present
Conduct ITGC and cybersecurity audits for HQ and affiliates
Assess access control, logging, and compliance gaps
Prepare audit reports with risk ratings
Coordinate remediation with IT and security teams

Senior Supervisor – IT Internal Audit — AEON Thana Sinsap (Thailand) PCL
Dec 2023 – Nov 2024
IT audits across HQ, branches, and subsidiaries
Performed risk assessment, planning, walkthroughs, and testing
Presented audit findings and tracked corrective actions

Senior IT Compliance — Dohome PCL
Feb 2023 – Nov 2023
Developed IT compliance framework and governance standards
Conducted IT risk assessments and system reviews
Created SOPs and regulatory documentation

Project Coordinator (Outsourced to Fujitsu) — CVG Outsourcing Co., Ltd.
Oct 2021 – Jan 2023
Coordinated incidents, RCA, and change requests via JIRA
Prepared weekly/monthly project performance reports
Supported cross-department communication

Supervisor – IT — P.P. Ontime Co., Ltd.
Aug 2021 – Oct 2021
Supported IT security operations
Managed GLPI ticketing system and documentation

Supervisor – IT — Global Service Center Co., Ltd.
Mar 2014 – Jul 2021
Managed AD, servers, firewalls, antivirus, network
Supported ISO audits and BCP implementation
Maintained web/mail security

Work Experience

MBK Internal Audit Co., Ltd.| Nov 2024 – Present

• Conducted IT audits for head office and affiliates to ensure compliance.

• Participated in risk assessments, audit planning, and findings documentation.

• Prepared audit reports and working papers and handled special assignments.

Senior Supervisor - IT Internal Audit

AEON Thana Sinsap (Thailand) PCL | Dec 2023 – Nov 2024

• Conducted IT audits for head office, branches, and affiliates to ensure compliance.

• Participated in risk assessments, audit planning, and findings documentation.

• Prepared audit reports and working papers and handled special assignments.

Senior - IT Compliance

Dohome PCL | Feb 2023 – Nov 2023

• Developed risk management strategies and compliance standards for IT operations.

• Conducted risk assessments, monitored IT governance, and led system reviews.

• Created SOPs and IT audit documentation to meet regulatory standards.

Project Coordinator (Outsourced to Fujitsu Thailand)

CVG Outsourcing Co., Ltd. | Oct 2021 – Jan 2023

• Managed change requests via JIRA, prepared

reports, and monitored system performance.

• Coordinated incident handling and root cause analysis across departments.

• Summarized project outcomes in weekly/monthly reports.

Supervisor Officer – IT

P.P. Ontime Co., Ltd. | Aug 2021 – Oct 2021

• Maintained IT security systems and handled GLPI-based service tickets.

• Managed documentation for ISO certifications and system maintenance.

Supervisor Officer – IT

Global Service Center Co., Ltd. | Mar 2014 – Jul 2021

• Oversaw IT operations and administrative systems (e.g., Active Directory, Server).

• System Administration for Web Security, Mail Security, and Antivirus Server (Symantec)

• Network Administration (Network and Firewall)

• Develop and execute the Business Continuity Plan for backup site

• Supported ISO audits and created TOR for state tenders.

• Served as QMR and DCC for ISO9001:2015

Education

Bachelor of Engineering in Computer

Engineering University of Phayao |

Graduated: 2013 | GPA: 2.13

High School – Science-Math Program

Latyao Witthayakhom School | Graduated: 2008 | GPA: 2.75