Description
The Risk & Control – Technology Senior Specialist role sits within Risk & Control, part of Finance, acting as Agoda's second line of defense for risk management and providing timely assurance across business, technology, financial, and operational risk.
You will partner across Product, IT, Supply, Commercial, People, Legal, Customer Service, and Finance , engaging at all levels to understand business processes and design technology controls that ensure compliance and sound risk management.
Key areas of responsibility include:
- Supporting the Risk & Control Leadership Team in maintaining a robust Enterprise Risk Management framework that enables growth and agility.
- Maintaining and continuously maturing Agoda's internal control environment and full SOX compliance.
- Contributing to a pragmatic control assessment, testing, and reporting framework with adequate coverage across Agoda's operations.
- Analyzing and/or designing IT and business process controls to identify risks, control weaknesses, and gaps.
- Guiding business partners in designing and implementing controls that strengthen the control environment and mitigate risk.
- Supporting ITGC/ITAC testing and documentation.
- Creating and maintaining comprehensive documentation.
- Acting as the subject matter expert and go-to resource on technology risk.
- Driving timely remediation of identified control deficiencies.
- Partnering with internal and external stakeholders to build relationships and coordinate assurance activities.
Requirements:
- Bachelor's degree in Accounting, Management Information Systems, Computer Science, Computer Engineering, or related field.
- 6+ years' experience as an IT Auditor with a public accounting firm or public company.
- Strong understanding of internal control frameworks (SOX, NIST, CMMC, SOC, ITIL, COBIT, PCI, COSO).
- Demonstrated ITGC proficiency.
- IT SOX management experience highly preferred.
- Excellent communication and relationship-building skills.
Nice to have:
- Certified Internal Auditor (CIA), Certified Information System Auditor (CISA), CISSP, or similar designation.
- High level of integrity.
- Curious, creative, and innovative mindset.
- Flexibility to adapt to an ever-evolving and dynamic work environment.