Joining Razer will place you on a global mission to revolutionize the way the world games. Razer is a place to do great work, offering you the opportunity to make an impact globally while working across a global team located across 5 continents. Razer is also a great place to work, providing you the unique, gamer-centric #LifeAtRazer experience that will put you in an accelerated growth, both personally and professionally.
Job Responsibilities :
Responsible for regulatory compliance at Fiuu Thailand, a payment gateway and payment acceptance services company, acting as the main point of coordination with HQ teams, in particular IT and Information Security, to collect and validate information and evidence and turn it into accurate and timely submissions to the Bank of Thailand (BOT) and other regulators. The role also oversees technology risk management, third-party risk, business continuity and audit.
1. Regulatory Compliance
- Monitor, interpret and assess the impact of applicable laws and regulations, such as payment systems, IT risk and cybersecurity requirements; conduct gap assessments and track remediation to closure.
- Maintain the Compliance Roadmap and the regulatory obligations register; support licensing, notification and consultation with regulators; and track regulatory commitments to ensure they are met on time.
- Monitor and respond to Central Fraud Registry (CFR) alerts and requests within the required timelines, coordinating with HQ teams to review the related merchants and transactions and take the required actions.
2. HQ Coordination & Regulatory Submissions
- Act as the main point of coordination with HQ IT, Information Security, Infrastructure and Product teams, translating regulator requests into clear information requests with defined owners and deadlines.
- Review HQ responses and evidence, then prepare and submit accurate and timely responses and reports to the BOT and other regulators.
- Brief HQ teams on Thai regulatory requirements, maintain a central record of regulatory correspondence, and escalate delays or inconsistencies to management.
3. Technology Risk Management
- Maintain the Technology Risk Management Framework, Risk Appetite/Tolerance, Technology Risk Register and RCSA, and assess risks of new products and system changes.
- Monitor KRIs and risk remediation plans, and report to senior management, the Risk Committee and the Board.
4. Information Security & PCI DSS
- Monitor compliance with Information Security policies, VA/PT results and remediation, in coordination with HQ IT and Information Security teams.
- Coordinate the annual PCI DSS renewal with HQ and the Qualified Security Assessor (QSA).
5. Outsourcing & Third-Party Risk
- Coordinate with HQ, which performs third-party risk assessments (including cloud service providers), to obtain assessment results, SLAs and remediation status, and ensure alignment with BOT outsourcing requirements.
- Maintain the Outsourcing Register for all TPSPs of the Thai entity and report third-party risks to management.
6. Business Continuity & Operational Resilience
- Oversee the BCP/DRP and review the BIA and RTOs against regulatory expectations and customer commitments.
- Conduct BCP/DR testing at least annually, track remediation, and assess the resilience of critical services, including dependencies on Group and third parties.
7. Audit & Regulatory Examination
- Act as the main coordinator with internal auditors, external auditors and the BOT for all audits and examinations, including IT audits, and prepare evidence, including evidence from HQ.
- Track audit findings and report remediation progress to management.
Pre-Requisites :
- Bachelor's or Master's Degree in Business Administration, Finance, Risk Management, Information Technology, or a related field.
- Minimum 8 - 10 years of experience in Compliance, Risk Management, Technology Risk, or Audit within FinTech, PSP, Acquiring, E-Wallet, Banking, or Financial Services.
- Strong knowledge of BOT regulations for payment service providers, particularly IT risk, cybersecurity and outsourcing requirements.
- Experience preparing regulatory submissions and working with regulators and auditors.
- Experience coordinating with HQ or regional IT teams, with the ability to translate technical information into clear regulatory responses.
- Excellent written and spoken Thai and English.
- Professional certification such as CISA, CRISC, CISM, or a compliance/risk management certification is preferred.
Razer is proud to be an Equal Opportunity Employer. We believe that diverse teams drive better ideas, better products, and a stronger culture. We are committed to providing an inclusive, respectful, and fair workplace for every employee across all the countries we operate in. We do not discriminate on the basis of race, ethnicity, colour, nationality, ancestry, religion, age, sex, sexual orientation, gender identity or expression, disability, marital status, or any other characteristic protected under local laws. Where needed, we provide reasonable accommodations - including for disability or religious practices - to ensure every team member can perform and contribute at their best.
Are you game?
