---

About this position

The Technology Risk Strategy Program Specialist develops and implements strategic risk management plans, establishes frameworks, leads program rollouts, creates training, and ensures transparent communication with stakeholders to support organizational technology risk objectives.

Responsibilities

- Develop comprehensive strategic plans for managing technology risks that align with the organization’s overall goals.
- Design a structured operating model for technology risk management, outlining processes, roles, and responsibilities to ensure consistency and effectiveness across the organization.
- Establish a detailed risk management program with an operational framework, timelines, and performance metrics, creating a clear roadmap with specific milestones and deliverables.
- Focus on prioritizing the program’s initial rollout within the company, coordinating pilot projects, gathering feedback, and refining the approach before expanding it organization-wide.
- Create specialized training programs to enhance personnel’s knowledge and skills in technology risk management, covering critical areas such as risk identification, assessment, mitigation, and monitoring.
- Ensure training programs are tailored to build specific expertise, including developing comprehensive materials, organizing workshops, and providing hands-on training.
- Regularly report on the progress and effectiveness of the technology risk management program to senior management and the board, highlighting key achievements, challenges, and areas for improvement.
- Use feedback and performance data to refine the strategic plans and operating model continuously. Conduct regular reviews to identify gaps and implement corrective actions, strengthening the program’s overall effectiveness.
- Maintain clear and consistent communication with all stakeholders, providing regular updates, addressing questions, and ensuring transparency in the progress and outcomes of risk management initiatives

Requirements

- Brings proven years of relevant experience in technology risk management
- At least 2 years in a leadership capacity.
- Skilled in identifying, assessing, and mitigating technology-related risks.
- Well-versed in regulatory requirements and IT governance best practices.
- Proficient with risk management frameworks and tools, including NIST, ISO 27001, and COBIT.
- Capable of clearly communicating risk insights to stakeholders at all levels in both Thai and English.
- Demonstrates strong leadership abilities to guide and support risk management teams across multiple subsidiaries.
- Committed to keeping up-to-date with advancements in technology risk management.
- Maintains a high level of ethics and integrity, particularly in handling sensitive information and making decisions.