Risk, Compliance, Governance & Project Roles — SCBX Group GRC Transformation

About the Role

Be a part of the SCBX mothership's GRC transformation. SCBX is building out the Group GRC team and hiring multiple specialist and project roles to drive the design, implementation, and operation of an enterprise GRC platform across the Group and its subsidiaries.

Responsibilities

• Hiring multiple specialist and project roles across design, implementation, and operation of Group GRC.
• Head of GRC Design & Governance — Own the Group GRC framework, taxonomy, change governance, and standards across all entities; act as senior adviser and challenger to subsidiaries and Group leadership.
• Operational Risk & Internal Control Lead — Define and operate enterprise ORM/ERM, policy governance and internal control management including RCSA, KRIs, incident management, risk appetite, policy lifecycle, control library and testing.
• Operational Risk & Business Continuity Lead — Own operational risk, third‑party risk management and business continuity processes including vendor due diligence, BCP/BIA, crisis management and operational resilience.
• Technology Risk & IT Third‑Party Risk Lead — Own technology risk and IT TPRM processes including IT risk assessment, cybersecurity governance, cloud and outsourcing risk, and IT regulatory compliance.
• Non‑Tech PMO Lead — Establish and manage project governance, integrated plans, deliverables, dependencies, vendor coordination, steering committees and reporting across the GRC transformation programme.
• Change Management Lead — Own change strategy, stakeholder engagement, communications, capability building, training and adoption for the GRC platform rollout.

Qualifications

• Experience in financial services, fintech, insurance or other regulated environments.
• Strong knowledge of risk frameworks (Basel, COSO, COSO ERM) or large‑scale transformation delivery methodologies.
• Experience in enterprise‑wide GRC transformation or system implementation (e.g., Archer) and familiarity with project management tools such as MS Project, Jira and Confluence.
• Cross‑entity / multi‑entity engagement experience preferred.
• Strong stakeholder management and communication skills with ability to engage senior leadership.
• Professional certifications relevant to the discipline (e.g., CIA, CRMA, GRCP, FRM, PMP) are an advantage.
• Excellent Thai and English communication skills.

Skills

• GRC platforms, risk assessment, policy governance, project and change management, and stakeholder engagement.