Our Company
Do you want to be part of Thailand banking transformation Data is the core of the new financial services era, and we are open for the opportunity to be part to drive this change at the core.
SCB DataX is a new venture of SCBx, the mothership of the financial technology business group comprising Siam Commercial Bank (SCB) and other subsidiaries, a leading financial services and digital services holdings in Thailand and ASEAN.
As part of the transformation of SCBx group of product and technology companies, under the SCBx brand, SCB DataX is the technology company to centralize data and provides AI/ML and data science services and products to the group.
With a leading-edge cloud native data & AI platform, our vision is to support the group to providing everyone in our region with the opportunity to prosper.
We work on forward-thinking challenges of centralizing, analyzing and sharing information. We collaborate with companies and experts in many different domains, embrace diversity and all that while having a good laugh and joy in work.
About Team and Role
At DataX, we recognize the critical role that effective risk management plays in our operations. DataX Risk Management division is responsible for data governance, privacy, security, technology risk, operational risk, model risk, business continuity, legal and compliance. We are tasked with development and execution of risk management strategies and ensuring the integrity of our processes and the safeguarding our organization.
This role sits within Operational Risk Management of the Risk Management division. As a dynamic and innovative AI/ML startup operating in the fintech industry, we are seeking a motivated and skilled Operational Risk Senior Specialist/ Specialist to join our team. This role offers an exciting opportunity to contribute in design and development of our risk management processes in a fast-paced environment.
In this role, you will be exposed to new ways of working, new risk management techniques, complex business model, and a collegial working environment. This role reports to Operational Risk Lead.
Responsibilities
Operational Risk Management (ORM)
- Facilitate Risk and Control Self-Assessment (RCSA) activities with business teams to identify, assess, and mitigate operational risks across organization.
- Monitor key operational risk indicators (KRIs), risk appetite metrics, and perform trend analysis to provide proactive risk insights to management and committees.
- Oversee operational incident management processes including incident reporting, root cause analysis, corrective action tracking, and committee escalation.
- Maintain operational risk registers, risk libraries, and ensure risk profiles accurately reflect business activities, control environments, and residual risk exposure.
- Prepare risk reports, dashboards, committee materials, and management updates for RMC, ROC, Board, and stakeholders.
- Promote risk awareness culture through training, workshops, communication, and continuous improvement initiatives across the organization.
Third Party Risk Management (TPRM)
- Oversee implementation of Third Party Risk Management (TPRM) framework and ensure compliance with organization, parent company, and regulatory requirements throughout the third-party risk management lifecycle.
- Facilitate, review and challenge of engagement classification, risk assessments, and criticality assessments conducted by business functions.
- Coordinate cross-functional risk assessments involving Operational Risk, Technology Risk, Cybersecurity, Privacy, Compliance, Legal, BCM, and other SMEs.
- Review and endorse classification of Critical Third-Party Engagements and ensure appropriate governance, escalation, and approval processes are completed.
- Prepare management reporting, risk dashboards related to third-party risk exposures and outsourcing arrangements.
- Support development and enhancement of TPRM policies, standards, procedures, risk methodologies, training materials, and risk awareness programs across organization.
Qualifications
- Bachelor's degree or higher in Risk Management, Business Administration, Finance, Accounting, Information Technology, Engineering, or related fields.
- Relevant work experience at least 3 years of experience in Operational Risk Management, Third Party Risk Management, Outsourcing Governance or Governance functions. (For the senior specialist, at least 5 years of experience in Operational Risk Management, Third party risk management, Outsourcing Governance or Governance functions.)
- Strong understanding of operational risk frameworks, incident management, third party risk management and governance processes.
- Experience in financial services, banking, or technology-driven organizations is preferred.
- Strong analytical, problem-solving, stakeholder management, and report-writing skills.
- Working knowledge of GRC platforms is advantageous.
It's Great if You Have
- Strong risk mindset with ability to balance risk management and business enablement.
- Comfortable working in a fast-growing technology and data-driven environment.
- Experience working with auditors and group-level governance functions.
- Ability to influence stakeholders and drive remediation across multiple functions.
- Fluent in English with strong presentation and executive communication skills.
