IT GRC Specialist / Senior Specialist (Security & Resilience) - Bangkok Based, Relocation Provided

Get to Know Our Team – Security & Resilience at Agoda

 

At Agoda, our Security & Resilience Department plays a critical role in safeguarding the organization. We oversee security, governance, risk management, compliance, and security operations—alongside business resilience capabilities including Business Continuity Management (BCM), Disaster Recovery (DR), and Crisis Management.

 

Our mission is to ensure Agoda can prevent, withstand, and recover from disruptions, whether cyber, operational, or external, while protecting our people, customers, and business.

 

As the security and resilience landscape evolves at an incredible pace, we pride ourselves on being early adopters of emerging technologies and innovative solutions. If you’re passionate about working with cutting-edge tools in a fast-moving, dynamic environment, this is an exciting challenge to take on.

 

The Opportunity

 

We are looking for a dedicated GRC (Governance, Risk Management & Compliance) Specialist/Sr. Specialist to join our team.

 

In this role, you will collaborate closely with internal stakeholders to manage Information Security, Compliance, and Resilience risks. You’ll contribute across multiple areas including risk management, business continuity, disaster recovery, and broader GRC initiatives.

 

We’re seeking someone who is an independent, proactive thinker, a strong stakeholder manager, and a natural team player.

 

This position is open to both local and international candidates, with relocation support available for eligible candidates to ensure a smooth transition to living and working in Bangkok.

 

In This Role, You Will:

• Apply strong knowledge of Risk Management, GRC functions, IT General Controls (ITGC), and industry frameworks (e.g., NIST CSF, PCI DSS, and other leading standards)
• Contribute to Business Continuity Planning (BCP), Disaster Recovery (DR), and Crisis Management programs, ensuring alignment with business and regulatory requirements
• Support Business Impact Analyses (BIAs) and help map critical functions, systems, and dependencies
• Continuously assess risks and ensure IT policies, procedures, and standards are effectively embedded into daily operations
• Deliver high-quality work in a dynamic environment with minimal supervision
• Partner with internal teams to enhance and mature security and resilience controls
• Track and ensure timely remediation of audit and risk assessment findings—never missing a deadline
• Proactively identify gaps and recommend improvements through strong written and verbal communication

 

What You’ll Need to Succeed:

• Bachelor’s degree in Business, Computer Information Systems, Computer Science, Information Systems Management, or equivalent experience
• At least 2–4 years of experience in a technology role, preferably within a security or resilience environment