About the role

We are seeking an experienced and forward-thinking Head of Technology Risk to lead the Technology Risk Management function and establish a strong risk culture across our digital banking ecosystem. This role is responsible for identifying, assessing, monitoring, and mitigating technology-related risks, ensuring the Bank's technology environment remains secure, resilient, and compliant with regulatory requirements and industry best practices.

As a senior leadership role, you will work closely with executives, technology teams, cybersecurity functions, regulators, and business leaders to ensure effective governance over technology risk, cybersecurity risk, cloud adoption, third-party risk, data governance, and emerging technologies such as Artificial Intelligence (AI).

The successful candidate will play a critical role in supporting the Bank's growth strategy while maintaining robust risk management practices aligned with regulatory expectations and international standards.

Key responsibilities

1. Lead Technology Risk Governance, policies, frameworks, and risk reporting.
2. Oversee Cybersecurity Risk, Cloud Risk, Data Governance, and AI Risk Management.
3. Manage IT Third-Party Risk (TPRM) across vendors and strategic partners.
4. Provide independent challenge and oversight for technology initiatives and digital transformation programs.
5. Support regulatory compliance with BOT requirements, ISO 27001, SOC 2, PDPA, and other relevant standards.
6. Present technology risk insights, key metrics, and emerging risks to Senior Management and the Board.

What we're looking for

1. 7–10+ years' experience in Technology Risk, Cybersecurity, IT Audit, IT Governance, or related fields
2. Experience in Banking, Financial Services, FinTech, or regulated industries preferred
3. Strong knowledge of cybersecurity, cloud technologies, data governance, and emerging technology risks
4. Excellent stakeholder management, leadership, and communication skills
5. Certifications such as CRISC, CISA, CISSP, CISM, or ISO 27001 Lead Auditor are highly preferred.