Risk & Control, Technology Senior Specialist (Bangkok Based, Relocation Provided)

Agoda is seeking a Risk & Control, Technology Senior Specialist to support its Enterprise Risk Management framework, mature the internal control environment, maintain SOX compliance, and drive remediation of control deficiencies. The role assesses and designs technology and business-process controls, performs ITGC/ITAC testing, creates control documentation, and prepares risk reporting for internal and external stakeholders.

The successful candidate will have at least six years of IT audit experience and a bachelor’s degree in a relevant field. The role requires knowledge of SOX, NIST, CMMC, SOC, ITIL, COBIT, PCI, and COSO, strong communication and collaboration skills, sound risk judgment, and openness to adopting new tools such as AI.

Support maintenance of Agoda's Enterprise Risk Management framework and internal control environment.

Maintain and mature SOX compliance and the effectiveness of financial reporting controls linked to business processes.

Assess and design IT and business-process controls to identify risks, weaknesses, and gaps.

Support ITGC/ITAC testing, documentation, walkthroughs, test procedures, and workpapers.

Coordinate assurance activities and drive timely remediation of identified control deficiencies.

Bachelor's degree in Accounting, MIS, Computer Science, Computer Engineering, or a related field, or an equivalent combination of education and experience.

6+ years of IT audit experience with a public accounting firm or public company.

Strong understanding of SOX, NIST, CMMC, SOC, ITIL, COBIT, PCI, and COSO from a technology perspective.

Demonstrated ITGC proficiency and clear communication of complex issues.

Strong collaboration, risk prioritization, analytical, decision-making, and independent working skills.

Candidates are asked to review Agoda's Hiring Process Guidelines before the interview. The application includes standard pre-interview questions about location, referrals, relocation, salary expectations, specialization, and consent to SMS updates.