IT Compliance Assistant Director, Ascend Money

Responsibilities:

• Assist in the development and implementation of IT policies, standards, and procedures to ensure compliance with legal and regulatory requirements, including BOT regulations for virtual banks, PDPA (Personal Data Protection Act), and ISO 27001.
• Conduct regular internal IT compliance audits and assessments to identify gaps and areas of non-compliance. Prepare and manage the documentation required for external audits and regulatory inspections.
• Collaborate with IT Security and Operations teams to ensure that security controls (e.g., access controls, encryption, network security) are properly implemented and monitored in line with compliance requirements.
• Identify and assess IT-related risks, including cybersecurity threats and operational vulnerabilities. Propose and track the implementation of effective mitigation strategies.
• Support the IT team in developing and testing incident response and business continuity plans to ensure system resilience and compliance with regulatory uptime requirements.
• Stay up-to-date on changes in IT and financial regulations in Thailand. Act as a technical subject matter expert on compliance issues, providing guidance to IT teams and preparing reports for senior management and the regulator.

Requirement:

• Bachelor's or higher degree in Computer Science, Business Administration, Information Systems, or a related field.
• Minimum 5+ years of experience in IT, with at least 3 years specifically in an IT compliance, IT audit, or IT security role within the banking or financial services industry in Thailand.
• Strong knowledge of the Thai regulatory landscape for financial institutions, with a deep understanding of BOT's IT regulations for virtual banks and the Personal Data Protection Act (PDPA).
• Proven experience with international security standards such as ISO 27001 (Information Security Management).
• Technical understanding of IT infrastructure, cloud platforms, network security, and application development lifecycles.