Risk & Control, Technology Senior Specialist - Agoda

This role is part of the Risk & Control team within Finance, serving as the second line of defense for risk management. The specialist partners with various departments to design technology controls that ensure compliance and sound risk management. Key duties include maintaining the Enterprise Risk Management framework, ensuring SOX compliance, conducting ITGC/ITAC testing, and acting as a subject matter expert on technology risk. The position involves analyzing and designing controls, supporting remediation efforts, and coordinating assurance activities with internal and external stakeholders.

Support the Risk & Control Leadership Team in maintaining a robust Enterprise Risk Management framework

Maintain and continuously mature Agoda’s internal control environment and full SOX compliance

Contribute to a pragmatic control assessment, testing, and reporting framework

Analyze and/or design IT and business process controls (SOX and non-SOX)

Guide business partners in designing and implementing controls

Support ITGC/ITAC testing and documentation

Create and maintain comprehensive documentation, including flow charts, process narratives, and risk and control matrices

Act as the subject matter expert and go-to resource on technology risk

Drive timely remediation of identified control deficiencies

Partner with internal and external stakeholders to build relationships and coordinate assurance activities

Support/lead the preparation and issuance of Risk & Control reports and Risk Committee reporting packs

Bachelor’s degree in Accounting, Management Information Systems, Computer Science, Computer Engineering, or related field

6+ years’ experience as an IT Auditor (external or internal) with a public accounting firm or public company

Strong understanding of internal control frameworks (SOX, NIST, CMMC, SOC, ITIL, COBIT, PCI, COSO)

Demonstrated ITGC proficiency

IT SOX management experience highly preferred

Able to work independently and collaboratively, with strong communication skills

Open to constructive feedback and continuous growth

Willing to adopt new tools, including AI, to support testing and reviews

Strong collaboration skills, particularly when without actual management authority

An eye to spot control risks with an intuition of risk prioritization

Self-starter with strong sense of responsibility

Certified Internal Auditor (CIA), Certified Information System Auditor (CISA), CISSP, or similar designation

High level of integrity and ability to constructively challenge

Curious, creative and innovative

Flexibility to adapt to an ever evolving and dynamic work environment

Quick thinker and confident in decision making

Process, problem solving and action orientated mindset

Good analytical skills with strong attention to detail

Excellent communication and relationship building skills

Professional "get it done" attitude and strong work ethics

Please review our Hiring Process Guidelines before your interview — click here to learn how interviewing at Agoda works