Agoda
Senior Specialist, IT Risk Management and Controls (Bangkok Based – Relocation Provided)

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
About Agoda
At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world.
Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide.
No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you’re ready to begin your best journey and help build travel for the world, join us.
The Opportunity and the Team
The Senior IT SOX Specialist performs comprehensive reviews of IT processes to ensure appropriate controls and procedures are in place and operating effectively. The Senior IT SOX Specialist role requires strong leadership and communication capabilities and will be a main point of contact for IT. Forming strong relationships with IT business partners and fostering a collaborative environment are critical to success in this role. The Senior IT SOX Specialist will serve as a contact for the external auditors and will assist in coordinating SOX efforts between the SOX department, SOX stakeholders and external audit.
Agoda is constantly expanding its reach through strategic innovations and data-driven experimentations. This allows us to stretch ourselves and get on (and in some cases, create) the next big waves. As a key stakeholder and enabler of the overall Agoda business, the Agoda BPRC team must play a unique role in balancing risk management without stifling innovation and growth.
The individual we’re looking for is a curious, dynamic, and fast learner with strong business intuitions, who has proficiency in understanding information technology risk. This individual must be a trusted partner of his/her various business partners to and be able to effectively balance driving risk management maturity with stakeholders outside of compliance.
The ideal candidate will have hands-on experience assessing the effectiveness of internal controls over financial reporting (ICFR), identifying and assessing technology risks across a variety of business functions, and executing control testing.
As the Sr. IT SOX Specialist, your business partners will span the entire range of functional areas such as Product, Information Technology, Marketing, Pricing, Partners Services, Customer Services, and Finance team. You would be expected to assist and advise on the IT control design framework to ensure overall SOX compliance and appropriate business risk management.
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
In summary, this is a perfect role for someone who wants to master the in-and-outs of a fast-growing, innovative eCommerce company, whilst contributing a tremendous amount of impact in balancing the risks and growth of the company.
This role is based in Bangkok, Thailand.
In This Role, You'll Get to
- Assist in support of maturing risk management capabilities that suits Agoda’s needs; and assist in advising on relevant technology risks continue to adapt it to the evolving needs of agoda
- Support ITGC and ITAC testing and documentation activities including but not limited to: performing walkthroughs, identifying risks & control gaps, defining test procedures, and completing workpapers.
- Analyze (and/or design) IT SOX controls supporting business processes and other compliance topics to identify risks and control weaknesses
- Identify controls that are currently in place, as well as any control gaps, based on identified risks
- Develop and maintain comprehensive documentation including flow charts, process narratives and risk and control matrices, segregation of duties matrices and any others required
- Help ensure that Agoda maintains an effective internal control environment, ensuring Agoda's complete SOX compliance and avoiding unwarranted deficiencies.
- Work to mitigate and remediate identified deficiencies with the business in a timely manner.
- Partner with internal and external stakeholders (e.g., process owners, external auditors, outsourced providers) to build strong relationships and support the coordination of IT SOX activities.
- Support coordination of audits for both Internal and External audit teams
- Support Internal and External audit teams to ensure that remediation plans are effectively implemented on a timely basis.
What You'll Need to Succeed
- A minimum of Bachelor’s degree preferably in Accounting or Finance
- 2-3 years of experience as an IT SOX external and/or internal auditor with a public accounting firm or public company.
- Thorough understanding of internal control concepts and relative frameworks (especially SOX & COSO) and experience in applying them in various business areas/functions from a technology perspective
- Demonstrated proficiency of ITGC concepts and understanding how they fit into the overall Control Landscape.
- Certified Internal Auditor (CIA), Certified Information System Auditor (CISA), or similar designation highly desirable
- Ability to work independently, productively and part of a team
- Fluency in English (other languages a plus)
- Proficiency in MS Office (Word, Excel, PowerPoint) and Visio
- IT Sox Management experience highly preferred, E-commerce or travel industry experience a plus
It's Great If You Have
- High level of integrity is a MUST
- Strong collaboration skills, particularly when without actual management authority
- An eye to spot control risks with an intuition of risk prioritization
- Curious, creative and innovative, particularly in design proper controls without stiffening the business growth
- Flexibility to adapt to an ever-evolving and dynamic work environment
- Self-starter with strong sense of responsibility
- Quick thinker and confident in decision making
- Process, problem solving and action orientated mindset
- Good analytical skills with strong attention to detail
- Strong communication and relationship building skills
- Professional “get it done” attitude and strong work ethics
- Curious, creative and innovative
- Fast-learner


Get help with your application
Your very own career expert that helps elevate your application to the next level.
#hongkong #singapore #thailand #spain #madrid #barcelona #mumbai #newdelhi #london #newyork #bangalore #india #shanghai #jakarta #bali #tokyo #osaka #yokohama #hcmc #hanoi #dubai #abudhabi #istanbul #taipei #phuket #seoul #manila #kualalampur #rome #hungary #italy #france #dublin #ireland #budapest #hongkong #toronto #vancouver #3 #Risk #FIN
Please review our Hiring Process Guidelines before your interview — click here to learn how interviewing at Agoda works.
Discover More About Working At Agoda
- Agoda Careers https://careersatagoda.com
- Facebook https://www.facebook.com/agodacareers/
- LinkedIn https://www.linkedin.com/company/agoda
- YouTube https://www.youtube.com/agodalife
Equal Opportunity Employer
At Agoda, we pride ourselves on being a company represented by people of all different backgrounds and orientations. We prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and innovation. Employment at Agoda is based solely on a person’s merit and qualifications. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.
We will keep your application on file so that we can consider you for future vacancies and you can always ask to have your details removed from the file. For more details please read our privacy policy.
Disclaimer
We do not accept any terms or conditions, nor do we recognize any agency’s representation of a candidate, from unsolicited third-party or agency submissions. If we receive unsolicited or speculative CVs, we reserve the right to contact and hire the candidate directly without any obligation to pay a recruitment fee.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location