Experience:

5 years required

Skills:

ISO 27001

Job type:

Full-time

• Home.
• Work with SCBX.
• Job Opening.
• Group Process Owner (Technology Risk Management, Cybersecurity Risk Management & IT Third-Party Risk Management) (1 position).
• During Project Implementation.
• Define and standardize ITRM, Cybersecurity Risk, and IT TPRM frameworks, methodologies, and taxonomies.
• ITRM (IT risk assessment, control frameworks, risk register).
• Cybersecurity Risk (threat/vulnerability management, incident response, security controls).
• IT TPRM (vendor onboarding, IT due diligence, risk assessment, continuous monitoring).
• Align with cybersecurity frameworks and standards (e.g., ISO 27001, NIST, CIS).
• Provide business and technical requirements and validate system design/configuration. Ensure alignment of data models, integrations, and workflows across systems (e.g., IAM, SOC, vulnerability tools).
• Support data migration, cleansing, and validation (IT assets, risks, vulnerabilities, vendor data).
• Lead UAT execution, including scenario design and validation.
• Review integration outputs and ensure data completeness, accuracy, and security compliance.
• Provide go-live readiness and sign-off.
• Drive chang management across the group through training, knowledge transfer, and group wide communication.
• After Go-Live (BAU).
• Technology Risk Management (ITRM) & Cybersecurity Risk Management.
• Perform IT risk identification, assessment, and monitoring across systems and applications.
• Maintain and monitor IT risk registers and control effectiveness.
• Track and analyze technology risk trends and exposures.
• Ensure timely remediation of identified IT risks and control gaps.
• Monitor cyber threats, vulnerabilities, and security incidents.
• Oversee vulnerability management, patching, and security control effectiveness.
• Analyze cyber risk trends and incident root causes.
• Ensure alignment with cybersecurity policies, standards, and regulatory requirements.
• IT Third-Party Risk Management (IT TPRM).
• Oversee IT vendor lifecycle management (onboarding, due diligence, risk assessment, monitoring, exit).
• Assess and monitor technology risks associated with third-party providers.
• Ensure compliance with outsourcing, data security, and technology risk regulations.
• Maintain accurate and complete IT vendor risk data.
• Cross-Domain.
• Drive adoption and long-term sustainability and end-to-end process adoption through training, knowledge transfer, and group wide communication.
• Ensure data quality, consistency, and governance across IT risk, cyber, and vendor domains.
• Analyze technology, cyber, and vendor risk trends to identify systemic issues.
• Support audit and regulatory reviews, ensuring readiness and evidence availability.
• Drive continuous improvement, process optimization, and cyber risk awareness.
• Conduct training and awareness programs for IT and business stakeholders.
• Competencies / Experience.
• 6-10 years of experience in IT Risk, Cybersecurity, IT Controls (e.g., ISO, NIST), and IT Third Party Risk Management.
• Familiarity with GRC tools related to Risk Management, Cybersecurity & Vulnerability Management, and Third-Party Risk Management.
• In-depth understanding of relevant risk and compliance processes, system integration and data flows.
• High level of accountability, attention to detail, good communication skills, strong analytical and problem-solving skills.
• Experience in process design and continuous improvement.
• Strong data governance and risk analytics capabilities.
• Stakeholder management and cross-entity coordination skills.
• Excellent written and verbal communication skills in Thai and English.
• Non-Tech PMO (1 Position) - Contract.
• During Project Implementation.
• Establish and manage project governance structure, frameworks, and reporting standards.
• Develop and maintain integrated project plans, including timelines, milestones, and dependencies.
• Track and manage deliverables, risks, issues, and interdependencies across workstreams, and escalate critical issues to senior management for timely resolution.
• Coordinate across Group, entities, vendors, and internal teams.
• Facilitate governance forums, including Steering Committees and working group meetings.
• Manage project communications, status reporting, and documentation control. Support budget tracking, procurement processes (PR/PO), and financial reporting. Govern change request process, including tracking, documentation, and approvals.
• Ensure alignment between business, functional, and technical teams.
• After Go-Live (BAU).
• Project & Enhancement Governance.
• Manage and track enhancement backlog, change requests, and delivery pipeline.
• Ensure prioritization aligns with business needs, regulatory requirements, and system capacity.
• Performance Monitoring & Reporting.
• Track SLA performance, system usage, and operational KPIs.
• Provide regular reporting to management on system performance and delivery status.
• Financial & Vendor Management.
• Monitor AMS budget, vendor performance, and cost tracking.
• Support procurement, billing validation, and contract management.
• Documentation & Audit Support.
• Maintain project and system documentation for governance and audit purposes.
• Support regulatory and audit requests with required documentation and reporting.
• Cross-Functional Coordination.
• Act as central coordination point across business, IT, AMS, and GRC teams.
• Ensure timely issue resolution and escalation management.
• Competencies / Experience.
• 8-10 years of experience in Project Management.
• Experience in large-scale transformation or system implementation projects.
• Experience in financial services, fintech, insurance or regulated environments (preferred).
• Strong knowledge of project management methodologies (e.g., Agile, Waterfall, Hybrid).
• Experience in PMO governance, planning, and reporting Understanding of GRC implementation lifecycle (preferred).
• Proficiency in project management tools (e.g., MS Project, Jira, Confluence).
• Familiarity with financial tracking and procurement processes.
• Understanding of system implementation and integration environments.
• Strong organizational and coordination skills.
• Excellent communication and stakeholder management.
• Ability to manage multiple priorities and work under pressure.
• High attention to detail and problem-solving mindset.
• Excellent written and verbal communication skills in Thai and English.
• Group GRC Design & Governance Authority (2 Positions).
• During Project Implementation.
• Act as the Group GRC Design Authority, ensuring regulatory alignment, standardization of taxonomy, processes, and controls, as well as governance over centralized master data across all entities.
• Own Change Governance, including reviewing and approving design changes and deviations from agreed standards, conducting impact assessments (compliance, control, and reporting), validating requirements and fees, prioritizing changes, overseeing AMS, and endorsing UAT prior to production release.
• Provide quality assurance and advisory oversight on business and functional requirements, test scenarios, and design changes to ensure accuracy, sustainability, and Group-wide alignment.
• Challenge and validate test scenarios, UAT approach, and key deliverables to ensure readiness and effectiveness.
• Ensure sustainable cross-entity integration and consistency of GRC processes, data, and system configurations across subsidiaries.
• Serve as the central accountability point for Group GRC oversight, managing stakeholder alignment, escalations, and continuous capability enhancement.
• Ensure cross-entity alignment and standardization during implementation.
• After Go-Live (BAU).
• Continuous Improvement & Capability Enhancement.
• Identify systemic issues and structural gaps; drive Group-level improvements and well as AI enhancement.
• Govern enhancement backlog prioritization to align with regulatory and control needs.
• Promote best practices and maturity uplift across entities.
• Change Governance & Control.
• Impact assessment (regulatory, control, reporting).
• Prioritization and alignment with Group objectives.
• Review and endorse UAT results prior to production release.
• Quality Assurance & Independent Oversight.
• Perform independent QA and validation of data, processes, and configurations.
• Challenge process effectiveness and data reliability across entities.
• Regulatory & Audit Alignment.
• Ensure ongoing compliance with regulatory requirements and internal policies.
• Support audit activities and regulatory reviews with governance oversight.
• Cross-Entity Alignment & Escalation.
• Act as central authority to resolve cross-entity inconsistencies and conflicts.
• Manage stakeholder alignment and escalations across business and IT teams.
• Master Data Governance.
• Review and perform a group-wide impact analysis to ensure consistency and identify potential conflicts for each centralized master data request (risk, control standards, process grouping, and organizational structure). Decide whether to proceed with or reject the request.
• Competencies / Experience.
• 8-10 years of experience in Risk, Compliance, Internal Audit, or GRC Governance.
• Proven experience in enterprise-wide GRC transformation or system implementation.
• Experience in financial services, fintech, insurance or regulated environments (preferred).
• Deep expertise in enterprise GRC frameworks and governance models.
• Strong understanding of risk, compliance, audit and control domains.
• Experience in multi-entity standardization and operating models.
• Experience with GRC platforms (e.g., Archer or similar tools).
• Understanding of data models, workflows, and system configuration principles.
• Familiarity with system integration and reporting structures.
• Strong strategic thinking and decision-making capability.
• Ability to challenge constructively and enforce governance standards.
• Excellent stakeholder management and conflict resolution skills.
• Strong analytical and problem-solving mindset.
• Professional certifications such as CIA, CRMA, or GRCP are an advantage.
• Excellent written and verbal communication skills in Thai and English.
• Change (1 position) - Contract.
• During Project Implementation.
• Owns the overall change strategy, stakeholder engagement, impact assessment, and adoption roadmap across the Group.
• Develops and executes communication plans, prepares leadership messaging, and manages stakeholder alignment across entities.
• Designs capability-building programs to ensure business readiness.
• Coordinate with entities to drive local change execution, gather feedback, manage resistance, and ensure subsidiary-level readiness and adoption.
• Tracks readiness metrics, monitors adoption KPIs, supports UAT coordination, and identifies areas requiring reinforcement.
• After Go-Live (BAU).
• Adoption & Behavioral Change.
• Monitor and drive sustained system adoption and process compliance across entities.
• Promote advanced usage and maturity of GRC processes and system capabilities.
• Performance Monitoring & Insights.
• Track and analyze adoption KPIs, user behavior, and engagement metrics.
• Identify adoption gaps and areas requiring reinforcement.
• Communication & Reinforcement.
• Execute ongoing communication strategies to reinforce key messages and updates.
• Maintain alignment with business, risk, and compliance stakeholders.
• Training & Capability Development.
• Deliver refresher training and continuous learning programs.
• Update training materials to reflect system enhancements and process changes.
• Change Impact for Enhancements.
• Assess and manage change impacts for new releases, enhancements, and regulatory updates.
• Ensure smooth rollout and adoption of changes across entities.
• Continuous Improvement.
• Gather feedback from users and stakeholders to improve adoption strategies and user experience.
• Drive continuous improvement in change management practices and GRC maturity.
• Competencies / Experience.
• 5-7 years of experience in Change Management, Transformation, or Organizational Development.
• Experience in large-scale system implementation or transformation programs.
• Experience in financial services, fintech, insurance or regulated environments (preferred).
• Strong knowledge of change management frameworks.
• Experience in stakeholder engagement, communication, and training design.
• Understanding of business transformation and adoption challenges.
• Familiarity with GRC systems or enterprise platforms (preferred).
• Ability to interpret adoption metrics and user analytics.
• Experience with learning platforms or communication tools.
• Strong communication and influencing skills.
• Ability to drive behavioral change and manage resistance.
• Excellent stakeholder management across multiple entities.
• Strong analytical and problem-solving mindset.
• Excellent written and verbal communication skills in Thai and English.

Skills:

Leadership Skill, Public Speaking, Project Management

Job type:

Full-time

• Home.
• Work with SCBX.
• Job Opening.
• Sustainability & Climate Strategic Intelligence.
• Job Overview.
• SCBX is seeking a dynamic and forward-thinking Sustainability & Climate Strategic Intelligence to drive our commitment to sustainable development and climate leadership. This role will play a pivotal part in shaping SCBX's sustainability strategy by providing thought leadership, analyzing global and domestic trends, and fostering strategic partnerships. The Sustainability Strategist will also support high-level engagements, develop strategies for social impact, and ensure alignment with SCBX's overarching mission to create long-term value for stakeholders and society.
• Climate & Sustainability Intelligence and Thought Leadership.
• Conduct in-depth analysis of global and domestic sustainability trends, policies, regulations, and standards (e.g., climate frameworks, ESG guidelines) to assess their implications for SCBX's sustainability strategy.
• Develop climate thought leadership content, including publications, white papers, and reports, to position SCBX as a leader in sustainability and climate action.
• Strategy Development for Social Issues.
• Design and implement strategies addressing key social challenges, such as financial inclusion and literacy, ensuring alignment with SCBX's sustainability goals and societal impact objectives.
• Collaborate with internal and external stakeholders to identify opportunities and innovative solutions for social good.
• Sustainability Strategic Engagement and Partnership Building.
• Lead strategic engagement efforts with key external stakeholders, including preparation for high-profile events such as COP30 and other global sustainability forums.
• Identify, establish, and nurture partnerships with organizations, governments, NGOs, and industry leaders to advance SCBX's sustainability agenda.
• Panel Remarks & Presentation Preparation.
• Craft compelling panel remarks, keynote speeches, and presentations for SCBX leadership to deliver at sustainability forums, conferences, and industry events.
• Ensure messaging reflects SCBX's vision, values, and leadership in sustainability.
• Secretariat Support for Sustainability Committee.
• Provide high-level secretariat support to the Sustainability Committee, including agenda setting, meeting coordination, documentation, and follow-up on action items.
• Facilitate effective communication and decision-making within the committee to drive sustainability initiatives forward.
• Minimum of [5-7 years] of experience in sustainability strategy, climate policy, social impact, or a related field, preferably in a corporate, or consulting.
• Strong analytical skills with the ability to interpret complex data, trends, and regulations.
• Exceptional written and verbal communication skills, including experience in thought leadership writing and public speaking preparation.
• Proven ability to build and manage strategic partnerships with diverse stakeholders.
• Knowledge of global sustainability frameworks (e.g., Paris Agreement, SDGs, TCFD) and social issues such as financial inclusion.
• Project management and organizational skills to support committee work and multi-stakeholder engagements.

Experience:

1 year required

Skills:

Finance

Job type:

Full-time

• Home.
• Work with SCBX.
• Job Opening.
• Net Zero Strategy Specialist.
• Be a part of the SCBX mothership's journey to Net Zero by 2050".
• Are you a sustainability leader ready to shape the future of finance in Asia? Discover your potential with us. We are currently in search of a senior expert to lead the net zero strategy for SCBX Group.
• The Net Zero Strategy Specialist will play a pivotal role in defining how SCBX achieves its net zero commitment by 2050 - designing the Group-wide strategy, framework, and policies that align our subsidiaries, portfolios, and financed emissions with credible international standards. This role requires a deep understanding of net zero transition planning, climate finance, and the banking and financial services sector, combined with the ability to engage and influence at the Board and senior management level.
• Advise on net zero strategy and framework for SCBX Group to achieve net zero in financed emissions by 2050, in alignment with credible standards, business strategy, goals and local context.
• Advise on transition of business model, operating model and value chain of SCBX to support the successful implementation of net zero strategy.
• Make recommendations on climate finance for SCBX investment and subsidiaries' products and services to align their portfolio with the strategy.
• Advise on KPIs and KRIs on net zero strategy.
• Define key policies and procedures to support net zero strategy including but not limited to credit policy, portfolio management, operations, etc.
• Advise on engagement strategy to support SCBX net zero strategy.
• Advise on offset strategy and SCBX's position on carbon credit.
• Provide analytical net zero intelligence to inform strategy.
• Experience & Expectations.
• Senior level with 10-15 years of experience.
• Experience in net zero strategy/transition plan development and implementation in a large financial institution setting is a priority.
• Experience or strong understanding of the banking business and financial sector is a priority.
• Experience in presentation and engagement with senior management / Board members will be an advantage.
• International environment/sustainability consultant background will be an advantage.
• Experience or knowledge of power, oil and gas, and hard-to-abate sectors will be an advantage.
• Understanding of climate adaptation and sustainable finance will be an advantage.
• Experience in business or financial institution in Asia/Thailand will be an advantage.
• Strong strategic thinking, problem-solving and communication skills required.
• Strong network in net zero and transition plan will be an advantage.

Experience:

6 years required

Skills:

CFA

Job type:

Full-time

• Home.
• Work with SCBX.
• Job Opening.
• Group Process Owner (Operational Risk, Enterprise Risk, Policy Governance & Internal Control Management) (1-2 positions).
• During Project Implementation.
• Define and standardize ORM, ERM, Policy Governance, and Internal Control Management frameworks, methodologies, and taxonomies.
• ORM (RCSA, incident management, KRI).
• ERM (risk appetite, aggregation, scenario analysis).
• Policy Governance (lifecycle, approval, attestation).
• Internal Control Management (control library, testing, issue management).
• Provide business requirements and validate system design/configuration.
• Ensure alignment of data models, process, and workflows across entities.
• Support data migration, cleansing, and validation (risk, control, and policy data).
• Lead UAT execution, including scenario design and validation.
• Review integration outputs and ensure data completeness and accuracy.
• Provide go-live readiness and sign-off.
• Drive chang management across the group through training, knowledge transfer, and group wide communication.
• After Go-Live (BAU).
• Operational Risk Management (ORM).
• Perform risk identification, assessment, and monitoring (RCSA cycles).
• Monitor incident reporting and root cause analysis.
• Track and analyze KRIs and risk trends.
• Ensure control effectiveness and timely remediation.
• Enterprise Risk Management (ERM).
• Conduct enterprise-wide risk assessments and scenario analysis.
• Aggregate and analyze risk exposures across entities and domains.
• Monitor risk appetite and escalate breaches.
• Provide risk insights to senior management and Board.
• Policy Governance.
• Manage policy lifecycle (creation, review, approval, renewal, retirement).
• Ensure policy compliance, attestation, and exception tracking.
• Coordinate policy updates aligned with regulatory changes.
• Drive policy awareness and communication across the organization.
• Internal Control Management (ICM).
• Monitor control execution and effectiveness across entities.
• Perform control testing and validation activities.
• Track and manage control deficiencies and remediation actions.
• Support audit activities and provide control evidence.
• Cross-Domain.
• Drive adoption and long-term sustainability and end-to-end process adoption through training, knowledge transfer, and group wide communication.
• Ensure data quality, consistency, and governance across ORM, ERM, Policy, and Controls.
• Analyze risk, control, and compliance trends to identify systemic issues.
• Support audit and regulatory reviews, ensuring readiness and evidence availability.
• Drive continuous improvement, process optimization, and risk culture enhancement.
• Conduct training and awareness programs across stakeholders.
• Competencies / Experience.
• 6-8 years of experience in Operational Risk Management, Enterprise Risk Management, risk aggregation, scenario analysis, Policy Governance, and Internal Control Management.
• Experience in financial services, fintech, insurance (preferred).
• Strong data governance and risk analytics capabilities.
• Stakeholder management and cross-entity coordination skills.
• In-depth understanding of relevant risk and compliance processes, risk frameworks (e.g., Basel, COSO, COSO ERM), system integration, data flows,.
• Familiarity with GRC tools related to Operational Risk Management, Enterprise Risk Management, and/or Policy & Compliance modules.
• Experience in process design and continuous improvement.
• High level of accountability, attention to detail, good communication skills, strong analytical and problem-solving skills.
• Professional certifications such as CIA, CFA, CRMA, or GRCP are an advantage.
• Excellent written and verbal communication skills in Thai and English.

Skills:

ISO 27001, Automation, Cloud Computing, English

Job type:

Full-time

• Home.
• Work with SCBX.
• Job Opening.
• Tech Risk Associate.
• We are seeking a highly skilled and motivated individual to join our team as a Technology Risk Management. In this role, you will be responsible for assessing, monitoring, and mitigating technology-related risks within our organization. You will play a crucial role in safeguarding our technology infrastructure, data assets, and operations against potential threats and vulnerabilities. As a Technology Risk Management, you will collaborate with cross-functional teams to ensure adherence to industry best practices and regulatory requirements while maintaining an effective risk management framework.
• Provide consultancy advice to business and project teams to ensure security standards and requirements are considered and implemented.
• Perform deep dive reviews focused on Cybersecurity Risk, Technology Risk, and Emerging Risk.
• Effective management of all technology risk and cybersecurity framework including technology policies and standards based on the Group's risk appetite.
• Closely monitor technology and cyber related KPIs, KRIs, KCIs and drive remediation actions as Group perspective.
• Timely update on all material technology risk and cybersecurity topics including a set of risk indicators to the relevant Group Risk Committees and forums.
• Oversight the result of control testing from subsidiaries to ensure Cybersecurity and technology controls meet internal and external compliance requirements.
• Conduct technology risk assessments: Identify and evaluate potential risks Management with the organization's technology systems, infrastructure, and processes. Assess the adequacy of controls, identify vulnerabilities, and recommend risk mitigation strategies.
• Develop and implement risk management strategies: Collaborate with stakeholders to develop comprehensive risk management strategies that align with business objectives and regulatory requirements. Implement controls and procedures to mitigate identified risks effectively.
• Monitor technology risk exposure: Continuously monitor technology systems, networks, and processes to identify emerging risks, vulnerabilities, and trends. Stay up-to-date with industry developments, emerging technologies, and regulatory changes to proactively address potential risks.
• Perform risk analysis and reporting: Analyze risk assessment findings, internal control evaluations, and audit reports to identify trends, root causes, and areas of improvement. Prepare detailed reports on risk exposure, mitigation strategies, and recommendations for management and relevant stakeholders.
• Collaborate with cross-functional teams: Work closely with IT teams, compliance officers, cybersecurity professionals, and other stakeholders to develop and implement risk management frameworks, policies, and procedures. Provide guidance and recommendations on technology-related risk management activities.
• Conduct technology risk training and awareness programs: Develop and deliver training programs to educate employees on technology risk management best practices, policies, and procedures. Raise awareness about emerging threats and provide guidance on incident response protocols.
• Assist in incident response and recovery: Support the organization in managing technology-related incidents, including data breaches, system failures, and cybersecurity threats. Coordinate response efforts, assist in recovery measures, and contribute to post-incident reviews and lessons learned.
• Stay updated on industry standards and regulations: Keep abreast of industry trends, emerging technologies, and regulatory requirements related to technology risk management. Provide recommendations on incorporating best practices into the organization's risk management framework.
• Minimum of 5 years' experience in Technology and Cyber Risk.
• Bachelor's degree or above in related discipline.
• Working experience or familiar in a group public company.
• Understanding of regulatory requirements such as BOT, OIC, and SEC; industry standards such as COBIT, NIST, ISO27001, ITIL, and PCIDSS.
• Experience in one or more emerging technologies such as Artificial Intelligence, Machine Learning, Distributed Ledger Technology, Robotic Process Automation, Cloud computing.
• Excellent communication and relationship building skills; proven ability to influence senior management.
• Good command of written and spoken in English is preferable.

Skills:

Financial Analysis

Job type:

Full-time

• Home.
• Work with SCBX.
• Job Opening.
• Sustainable Finance Specialist.
• We are seeking a highly experienced Sustainable Finance Specialist to join our forward-thinking team. This strategic role is pivotal in shaping and advancing SCBX Group's sustainable finance initiatives, helping us lead the region in financial innovation with impact. If you are passionate about sustainability and finance, and have a strong strategic mindset, we invite you to apply.
• Strategic Leadership in Sustainable Finance.
• Develop and maintain deep insights into sustainable finance trends, policies, standards, and emerging areas such as transition finance, adaptation finance, nature and biodiversity finance, social finance, carbon markets, and blended finance.
• Set the strategic direction for sustainable finance within the SCBX Group and drive product innovation to support commercialization and industry leadership.
• Proactively engage with regulators, policymakers, and key industry stakeholders to advance the Group's sustainable finance objectives.
• Implementation & Advisory.
• Review, enhance, and update SCBX Group's sustainable finance frameworks in alignment with evolving global standards and internal strategic direction.
• Oversee and provide expert advice on sustainable finance transactions to ensure alignment with established principles, criteria, and frameworks.
• Manage and maintain a comprehensive database of sustainable finance transactions, categorized by product type and sustainability objective.
• If you meet the following qualifications and are ready to make a difference, we encourage you to apply.
• Minimum of 10 years of experience in the financial industry or top-tier business consulting, with a focus on financial strategy or product development.
• Proven experience integrating ESG or climate considerations into business strategies or financial products.
• Strong analytical, strategic, and communication skills with a results-driven and growth-oriented mindset.
• Master's degree or MBA in Finance, Business Administration, or a related field.
• In-depth knowledge of sustainable finance market trends and product landscape.
• Familiarity with global sustainable finance standards and frameworks such as ICMA, LMA, EU Taxonomy, etc.
• Understanding of climate-related technologies in sectors such as renewable energy, green buildings, carbon capture, and clean fuels.

Experience:

7 years required

Skills:

Cloud Computing, Architecture, Risk Management, Amazon AWS, English

Job type:

Full-time

• Home.
• Work with SCBX.
• Job Opening.
• Technical Governance Lead Cloud COE.
• Role Purpose.
• The Technical Governance Lead is accountable for defining, governing, and continuously improving cloud technical standards, control frameworks, and compliance-by-design practices across the SCBX Group. This role bridges cloud engineering, security, risk, and regulatory requirements to ensure scalable, secure, and compliant cloud adoption.
• Define and govern SCBX group's cloud policy, standards, reference architectures, and control baselines. (across multi-cloud perspective).
• Align cloud governance with regulatory, tech risk, audit, and cyber security requirements.
• Design cloud governance frameworks covering related technical aspects. (IAM, network, data protection, logging, DR, and CSPM).
• Participate in cloud architecture and change governance forums (e.g. CADRB, CAB).
• Support ITSM integration and operational governance models.
• Act as governance advisor to subsidiaries and group initiatives.
• Key Deliverables.
• Group-wide cloud governance framework.
• Audit and regulatory readiness artifacts.
• Consistent multi-cloud control posture.
• Cloud Governance Technical Operating Model.
• Required Experience & Qualifications.
• 7+ years of experience Cloud/IT technical governance role.
• Experience in regulated industries (banking, financial services, fintech) and familiar with the related regulatory requirements (e.g. BOT, SEC).
• Strong understanding of cloud security, governance, and ITIL/ITSM.
• Excellent communication, presentation, and inter-personal skills with fluent in Thai and English languages.
• Experience as a member of the Architecture Review Board (ARB) or Change Advisory Board (CAB) and familiarity with enterprise technical governance practices.
• Knowledge of compliance, cybersecurity, and risk management principles, particularly in a fintech or banking environment.
• Proven track record of developing and implementing technical governance frameworks and best practices.
• Preferred.
• AWS / Azure certifications.
• Experience with CSPM, policy-as-code, or GRC tools.

Experience:

3 years required

Skills:

M&A

Job type:

Full-time

• Home.
• Work with SCBX.
• Job Opening.
• M&A Compliance.
• The M&A Legal Compliance Officer will play a key role in supporting our company's growth strategy through the management of legal and compliance risks associated with mergers, acquisitions, and other strategic transactions. This role requires a deep understanding of M&A processes, corporate law, and regulatory compliance.
• Ensure compliance with all relevant laws, regulations, and internal policies during M&A transactions.
• Conduct due diligence investigations and risk assessments.
• Draft, review, and negotiate M&A transaction documents.
• Collaborate with cross-functional teams to ensure successful deal execution.
• Manage relationships with external legal counsel and other professional advisors.
• Keep abreast of legislative changes that may affect the company and its affiliates.
• If you meet below qualifications and ready to take your skills to the next level and join a dynamic and innovative team, we encourage you to apply for this exciting opportunity. We offer a competitive salary and benefits package, along with the opportunity to work with a team of talented and passionate professionals.
• A minimum of 3 years of legal/compliance experience, with a focus on M&A transactions.
• Strong knowledge of corporate law and compliance regulations.
• Excellent negotiation and communication skills.
• Ability to work independently and as part of a team.
• Strong analytical and problem-solving skills.

Experience:

5 years required

Skills:

Cloud Computing, Amazon AWS, Architecture, DevOps, Leadership Skill

Job type:

Full-time

• Home.
• Work with SCBX.
• Job Opening.
• Enterprise Architect - Cloud COE.
• SCBX is transforming into a global-leading financial and technology group, driving innovation across PortCo. As part of our Cloud Center of Excellence (Cloud CoE), this role is pivotal in standardize cloud architecture, modernization, and enterprise-grade cloud platform development across the group.
• We are seeking a highly skilled Cloud Specialist with deep, hands-on experience across major CSPs, e.g., Azure, AWS, GCP, Huawei, capable of designing secure, scalable, resilient cloud solutions and driving cloud architectural standards for SCBX Group.
• You will work with cross-functional teams to build and govern cloud landing zones, design the enterprise cloud portal, and ensure each portfolio company adopts cloud technologies efficiently and responsibly. The role offers extensive opportunities for upskilling, cloud certifications, and career advancement.
• Cloud Architecture & Multi-Cloud Governance.
• Develop, Lead and govern cloud architecture standards, ensuring alignment with enterprise strategies, security baselines, and regulatory requirements.
• Define, develop, and maintain cloud landing zones, reference architectures, and reusable cloud solution patterns.
• Ensure consistent adoption of best practices across major CSPs, e.g., Azure, AWS, GCP, and Huawei, especially in identity, network, security, observability, and workload design.
• Hands-On Cloud Solution Design & POC.
• o Perform practical, hands-on design, prototyping (POC), and build of cloud solutions across major CSPs, e.g., Azure, AWS, GCP, and Huawei.
• Provide end-to-end technical leadership: requirement analysis, architecture design, POCs, deployment guidance, and operational transition.
• Support PortCo on cloud modernization, migration strategies, and workload transformation.
• Enterprise Cloud Initiatives.
• Oversee hybrid/multi-cloud integrations, private cloud interconnects, and enterprise-wide data platform integration.
• Drive innovation in cloud platforms and advanced cloud capabilities (e.g., serverless, container platforms, event-driven architecture, large-scale data processing).
• Collaboration & Leadership.
• Work closely with engineering, operations, cybersecurity, and business teams across SCBX Group to deliver robust, compliant cloud solutions.
• Translate business needs into multi-cloud architectural solutions that are cost-efficient, secure, scalable, and resilient.
• Engage and manage stakeholders across varied PortCo with differing cloud maturity levels.
• Optimization & Continuous Improvement.
• Continuous self-learning from available resources not limited to only organization's provided resources with the aim to the best in class for SCBX Group cloud solutions delivery for achieving business agility, cloud resiliency in optimized cost and performance.
• Introduce new cloud capabilities, tools, and automation to improve developer experience and platform efficiency via Self-POC.
• Experience and Requirements.
• Minimum of 5+ years in multi-cloud/enterprise architecture, focus on the cloud related solution for BFSI industry.
• Core Skills (Required).
• Multi-Cloud Architecture Expertise.
• Proven hands-on experience architecting and implementing solutions on major CSPs, e.g., Azure, AWS, GCP, and Huawei.
• Strong understanding of cloud architectural principles including: Scalability, elasticity, distributed design Cloud security, IAM, and zero-trust architectures. Network architecture across major CSPs, e.g., Azure, AWS, GCP, and Huawei. High availability and resilience patterns. Cost optimization and FinOps best practices. Multi-region and hybrid architectures.
• Cloud Engineering & Solution Design.
• Demonstrated experience in building cloud solutions, not just governance and communication: Compute, storage, networking. Containerization (AKS/EKS/GKE), serverless. CI/CD and DevOps integration. Data platform deployments. Cloud-native service adoption.
• Ability to design solutions using best practices across major CSPs, e.g., Azure, AWS, GCP, and Huawei.
• Distributed Application & Modern Architecture.
• Knowledge and practical exposure to microservices, API architectures, event streaming, and cloud-native application patterns.
• Project & Delivery Experience.
• Experience handling full project lifecycles: requirement analysis.
• architecture.
• delivery.
• operations.
• Interpersonal & Leadership Skills.
• Strong collaboration skills, stakeholder management, and ability to influence decisions across PortCo.
• Standout & Preferred Skills.
• Cloud Certifications (Highly Advantageous).
• Azure Solutions Architect Expert.
• AWS Certified Solutions Architect - Professional.
• Google Professional Cloud Architect.
• TOGAF 10th certification.
• Enterprise Architecture Skills (Plus).
• Enterprise Architecture Skills.
• Strong understanding of EA frameworks and methodologies.
• Technology & Ecosystem Expertise.
• Deep understanding of cloud platform ecosystems, tools, and integrations across major CSPs, e.g., Azure, AWS, GCP, and Huawei.
• Experience with DevOps, SRE practices, infrastructure-as-code tools (Terraform, Bicep, CloudFormation), and cloud operations.
• Professional Background.
• Experience in BFSI cloud architecture or highly regulated industries.
• Background in technology consulting, hyperscalers, or fast-paced scale-up environment.

Experience:

6 years required

Skills:

Compliance, Thai, English

Job type:

Full-time

• Home.
• Work with SCBX.
• Job Opening.
• Group Process Owner (Operational Risk, TPRM (Non-IT) & Business Continuity Management) (1-2 positions).
• During Project Implementation.
• ORM (RCSA, incident management, KRI).
• TPRM (vendor onboarding, due diligence, risk assessment, monitoring).
• BCM (BCP lifecycle, testing, crisis management).
• Provide business requirements and validate system design/configuration.
• Ensure alignment of data models, process, and workflows across entities.
• Support data migration, cleansing, and validation (risk, vendor, and BCP data).
• Lead UAT execution, including scenario design and validation.
• Review integration outputs and ensure data completeness and accuracy.
• Provide go-live readiness and sign-off.
• Drive chang management across the group through training, knowledge transfer, and group wide communication.
• After Go-Live (BAU).
• Operational Risk Management (ORM) - Group Oversight & Entity Execution.
• Perform risk identification, assessment, and monitoring (RCSA cycles).
• Monitor incident reporting and root cause analysis.
• Track and analyze KRIs and risk trends.
• Ensure control effectiveness and timely remediation of issues.
• Third-Party Risk Management (Non-IT TPRM) - Group Oversight & Entity Execution.
• Oversee third-party lifecycle management (onboarding, due diligence, risk assessment, ongoing monitoring, exit).
• Monitor vendor risk profiles and enforce remediation actions.
• Ensure compliance with outsourcing and vendor risk regulations.
• Maintain accurate and complete vendor risk data.
• Business Continuity Management (BCM) - Group Oversight & Entity Execution.
• Ensure BCP lifecycle management (plan development, review, approval, testing, and maintenance).
• Monitor BCP testing results and recovery readiness.
• Manage incident/disruption response and lessons learned.
• Ensure alignment with regulatory and resilience requirements.
• Cross-Domain.
• Drive adoption and long-term sustainability and end-to-end process adoption through training, knowledge transfer, and group wide communication.
• Ensure data quality, consistency, and governance across ORM, TPRM, and BCM.
• Analyze risk, vendor, and disruption trends to identify systemic issues.
• Support audit and regulatory reviews, ensuring readiness and evidence availability.
• Drive continuous improvement, process optimization, and risk culture enhancement.
• Conduct training and awareness programs across stakeholders.
• Competencies / Experience.
• 6-8 years of experience in Risk Management, Compliance, BCM, or Third-Party Risk.
• Experience in financial services, fintech, insurance (preferred).
• In-depth understanding of Operational Risk Management (ORM) frameworks (e.g., Basel, COSO), Third-Party Risk / Outsourcing Risk Management, Business Continuity Management (BCM) standards (e.g., ISO 22301).
• Familiarity with GRC tools related to Operational Risk Management, Third Party Risk Management, and/or Business Continuity Management modules.
• High level of accountability, attention to detail, good communication skills, strong analytical and problem-solving skills.
• Experience in process design and continuous improvement.
• Strong data governance and risk analytics capabilities.
• Stakeholder management and cross-entity coordination skills.
• Professional certifications such as CIA, CRMA, or GRCP are an advantage.
• Excellent written and verbal communication skills in Thai and English.