IT GRC Specialist / Senior Specialist

 

Get to Know Our Team – Security at Agoda 

At Agoda, our Security Department plays a critical role in safeguarding the organization. We oversee security, governance, risk management, compliance, and security operations across the company—ensuring there are no breaches or vulnerabilities that could impact our business or our people. 

As the security landscape evolves at an incredible pace, we pride ourselves on being early adopters of emerging technologies and innovative solutions. If you’re passionate about working with cutting-edge tools in a fast-moving, dynamic environment, this is an exciting challenge to take on. 

The Opportunity 

We are looking for a dedicated GRC (Governance, Risk Management & Compliance) Specialist/Sr. Specialist professional to join our team. 

In this role, you will collaborate closely with internal stakeholders to manage Information Security and Compliance risks. You’ll contribute across multiple areas including IT SOX compliance, risk management, and broader GRC initiatives. 

We’re seeking someone who is an independent, proactive thinker, a strong stakeholder manager, and a natural team player. 

This position is open to both local and international candidates, with relocation support available for eligible candidates to ensure a smooth transition to living and working in Bangkok. 

In This Role, You Will: 

• Apply strong knowledge of Risk Management, GRC functions, IT SOX Compliance, IT General Controls (ITGC) and industry frameworks (e.g., NIST CSF, PCI DSS and other leading standards). 

• Support and manage IT SOX compliance activities, including control design, testing, documentation, and remediation tracking. 

• Continuously assess risks and ensure IT policies, procedures, and standards are effectively embedded into daily operations. 

• Deliver high-quality work in a dynamic environment with minimal supervision. 

• Partner with internal teams to enhance and mature security controls. 

• Track and ensure timely remediation of audit and risk assessment findings—never missing a deadline. 

• Proactively identify gaps and recommend improvements through strong written and verbal communication. 

What You’ll Need to Succeed: 

• Bachelor’s degree in Business, Computer Information Systems, Computer Science, Information Systems Management, or equivalent experience. 

• At least 2-4 years of experience in a technology role, preferably within a security environment. 

• Strong understanding of international Information Security standards and frameworks. 

• Ability to manage multiple projects and balance competing priorities. 

• Comfort analyzing operational and technical data under