GRC Analyst (Bangkok-based, 6-month Contract)

At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world.  

Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide.

No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you’re ready to begin your best journey and help build travel for the world, join us.

The IT Security Department oversees security governance, risk management, compliance, operational resilience, and security operations across Agoda. Our mission is to proactively identify and mitigate risks, prevent vulnerabilities or breaches, and safeguard Agoda, its employees, partners, and customers. 

We work across multiple areas including Business Continuity Planning (BCP), Disaster Recovery (DR), security awareness, and product compliance, ensuring Agoda’s technology and operations remain secure, resilient, and compliant. 

This role is a 6-month contract based in Bangkok, Thailand and the successful candidate will support several resilience and governance initiatives across Agoda’s technology environment. 

You will collaborate with a diverse group of professionals across crisis management, IT disaster recovery, security awareness, and compliance functions to support Agoda’s operational resilience and security governance programs. 

This role provides hands-on exposure to security governance, operational resilience, crisis management, and compliance, making it a strong entry point for candidates interested in building a career in cybersecurity, risk management, or technology governance. 

• Assist in creating, updating, and aligning BCP and Disaster Recovery documentation across departments 
• Support risk assessments, Business Impact Analyses (BIA), and scenario planning activities
• Help organize and coordinate BCP/DR workshops and simulation exercises
• Support security awareness initiatives, including documentation, campaigns, and internal communications
• Assist with product and security compliance activities, including tracking requirements and supporting documentation reviews
• Maintain centralized documentation, trackers, and reporting dashboards for governance and resilience programs
• Coordinate and follow up on action items from resilience reviews, audits, and compliance initiatives 

• Strong command of written and spoken English 
• Independent and proactive, with the ability to take ownership of tasks and drive them forward 
• Fast learner, able to quickly understand new concepts, tools, and processes 
• Excellent communication and interpersonal skills 
• Comfortable asking questions, seeking clarification, and contributing ideas when improving processes. 
• Detail-oriented and well-organized 
• Comfortable working in a fast-paced, evolving environment 
• Strong documentation and follow-up skills 
• Curiosity and willingness to learn, especially in areas such as security, risk, and operational resilience 
• Ability to manage multiple small tasks and priorities simultaneously 
• Basic understanding of risk management, security, or operational resilience is a plus 

• Familiarity with Google Suite, Confluence, or project management tools like Jira 
• Exposure to GRC, security awareness, IT operations, or resilience programs 
• Knowledge of frameworks such as ISO 22301, ISO 27001, NIST, or ITIL 
• Experience supporting workshops, training sessions, or tabletop exercises 

#Bangkok #IT #entrylevel

• Agoda Careers https://careersatagoda.com
• Facebook https://www.facebook.com/agodacareers/
• LinkedIn https://www.linkedin.com/company/agoda
• YouTube https://www.youtube.com/agodalife

At Agoda, we pride ourselves on being a company represented by people of all different backgrounds and orientations. We prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and innovation. Employment at Agoda is based solely on a person’s merit and qualifications. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.

We will keep your application on file so that we can consider you for future vacancies and you can always ask to have your details removed from the file. For more details please read our privacy policy.

We do not accept any terms or conditions, nor do we recognize any agency’s representation of a candidate, from unsolicited third-party or agency submissions. If we receive unsolicited or speculative CVs, we reserve the right to contact and hire the candidate directly without any obligation to pay a recruitment fee.