Joining Razer will place you on a global mission to revolutionize the way the world games. Razer is a place to do great work , offering you the opportunity to make an impact globally while working across a global team located across 5 continents. Razer is also a great place to work, providing you the unique, gamer-centric #LifeAtRazer experience that will put you in an accelerated growth, both personally and professionally.
Job Responsibilities :
The Senior Compliance & Risk Manager will be responsible for building and operating the regulatory compliance framework required to launch and sustain Bank of Thailand (BOT) regulated payment services in Thailand, ensuring full adherence to all license conditions, BOT notifications, AML/CFT requirements, and internal governance standards. The role also covers ongoing legal entity compliance, including management of the Foreign Business License (FBL) and the appointment and oversight of the Data Protection Officer (DPO) function under the PDPA. The role is further responsible for drafting, implementing, and enforcing compliance policies, procedures, and internal controls, and for delivering training and awareness programs for all relevant teams and employees. Role Summary
The Risk & IT Compliance Manager is responsible for overseeing technology risk management, IT regulatory compliance, information security governance, third-party risk management, business continuity, audit coordination, and regulatory engagement activities. The role is the accountable owner for the technology-related regulatory obligations. It is also the entity's single point of coordination for Bank of Thailand submissions, examinations and audits on technology matters. E nsur ing that the organization maintains an effective risk and control environment, complies with applicable regulatory requirements, and operates in a secure, resilient, and sustainable manner.
1. Technology Risk Management & Governance
Develop and maintain the organization's Technology Risk Management Framework.
Maintain the Technology Risk Register; conduct technology risk assessments and where required risk control self-assessments.
Define, monitor, and report Technology Key Risk Indicators (KRIs).
Track Technology Risk Remediation Plans through to closure and monitor remediation progress , reporting progress and overdue items .
Assess technology risks associated with new products, services, projects, and system changes.
Prepare and present technology risk reports to senior management, the Risk Committee and the Board.
Support the establishment and review of Technology Risk Appetite and Risk Tolerance statements.
2. IT Regulatory Compliance & Technology Governance
Monitor, analyze, and interpret applicable technology-related laws, regulations, and regulatory expectations.
Assess the impact of new regulatory requirements on the organization.
Conduct compliance gap assessments and identify remediation actions.
Develop and maintain the Technology Compliance Roadmap.
Review and enhance the IT Governance Framework, policies, and standards.
Coordinate compliance initiatives with Group/HQ stakeholders.
Prepare supporting evidence and documentation for regulatory reviews and inspections.
3. Information Security , Cybersecurity and PCI DSS Oversight
Monitor compliance with Information Security policies, standards, and procedures.
Review Vulnerability Assessment and Penetration Testing (VA/PT) results.
Track security findings and remediation activities.
Assess the adequacy of security and cybersecurity controls.
Oversee the management of security incidents and cyber incidents.
Oversee data breach management and response activities.
Support Data Protection Impact Assessments (DPIA) and privacy risk assessments.
Manage and assist on PCI DSS annual renewal assessment .
4. Outsourcing & Third-Party Risk Management
Assess risks associated with third-party service providers before onboarding.
Conduct periodic Vendor Risk Assessments.
Evaluate risks arising…