Want to Know More About BOL?

Explore who we are, what we do, and how BOL uses data and technology to drive smarter business decisions.

🔗 Learn more: https://bol.co.th

ISO and Internal Management Systems

• Oversee and be responsible for creating, reviewing, updating, and maintaining documents related to the organization's management system standards, such as ISO/IEC 27701, ISO/IEC 27001, or other relevant future standards.

• Manage and organize documents (including ROPA, DPIA, LIA, and other related documents) systematically and ensure they are traceable and auditable.

• Coordinate with relevant departments to prepare for internal and external audits and follow up on closing any observations or gaps identified.

• Participate in and support the review of internal policies and processes to ensure alignment with relevant standards and best practices.

• Coordinate with technology, data, and other support departments to ensure compliance with applicable standards.

Regulatory Compliance

• Monitor, track, execute, coordinate, and advise to ensure the company's operations comply with laws, regulations, and business standards.

• Manage and coordinate requirements from ETDA, NCSA, or other relevant regulatory bodies, including related conditions and practices such as Terms of Use / Terms & Conditions, digital platform requirements, cybersecurity best practices, and others.

• Support the review, update, and preparation of documents, such as Terms of Use and Privacy Notices.

• Monitor incidents related to personal data or legal/regulatory matters and support response processes if needed, including supporting the Data Protection Officer (DPO) in tasks such as recording and storing data subject requests, preparing DPO appointment announcements, and other relevant documents.

• Provide guidance to employees and stakeholders on compliance with personal data protection laws or other relevant regulations, including conducting annual training on data protection, information security, and legal compliance.

Customer Questionnaire & Documentation

• Responsible for responding to customer questionnaires, forms, assessments, and documents acknowledging policies related to legal compliance, data security standards, and company policies.

• Coordinate with relevant departments to ensure accurate responses.

• Maintain completed questionnaires as evidence for future audits.

Risk Management

• Participate in and support risk identification, risk assessment, and monitoring of controls according to the Enterprise Risk Management (ERM) framework or other organizational standards, including preparing documents and related risk management activities.

• Coordinate and gather information from various departments to identify and assess risks according to the ERM framework.

General and Internal Coordination

• Maintain complete, accurate, and easily retrievable documents.

• Coordinate with internal company departments, external parties, and relevant government agencies.

• Help improve work processes to ensure efficiency, transparency, and auditability.

• Perform other duties as assigned.

Qualifications / Requirements

• Bachelor's degree or higher.

• 5–7 years of work experience, with experience in Compliance, Risk, and Data Governance. Experience in relevant ISO Standards is a plus.

• English proficiency sufficient for work purposes.

• Ability to work effectively in a team.

• Understanding of or interest in data, technology, or digital systems.

• Proficiency in basic computer applications such as Microsoft Office, PowerPoint, and Excel.

• Analytical thinking, planning, problem-solving, coordination skills, and attention to detail.

• Eager to learn with a proactive, can-do attitude and willingness to take action.

• Logical thinking and business sense: able to see the organizational picture, connect requirements, regulations, and standards, and assess the business impact appropriately

• Self-motivated, with a willingness to develop professionally and grow within the organization.