Senior IT Specialist / IT Operations Manager
- Bangkok
- Permanent
- Full-time
Backed by top-tier shareholders such as Sumitomo Bank, BRI Bank (Ventures), 500 Tuktuk, SoftBank Vision Fund 2, SoftBank Ventures Asia, Sequoia Capital India, Alpha JWC Ventures, VNG Corporation, Rapyd Ventures, Endeavor, EDBI, SGInnovate, Qualgro, Cool Japan Fund, Samsung and Golden Gate Ventures, we are proud to be a leading force in Southeast Asia's FinTech space.Our recent strategic milestones include the acquisition of regional digital payments platform CardUp, and a co-investment into Bank Index in Indonesia, and most recently, a strategic investment from Gobi Partners, further strengthening our ecosystem of SME financial services. For more information, please visit:Our impact and innovation have been recognized with numerous accolades, including:
- Global SME Finance Awards by IFC, part of World Bank 2021-2023
- Monetary Authority of Singapore FinTech Award (2016, 2021)
- KPMG FINTECH 100 Leading Global Fintech Innovators (2018)
- Brands for Good (2019, 2023)
Hear from our team: , ,Here at Funding Societies | Modalku we live by our core values GETFS:
- Grow Relentlessly: Strive to become our best, most authentic selves.
- Enable Teamwork, Disable Politics: Only by forging togetherness, we help each other succeed.
- Test Measure Act: Stay curious and reinvent ourselves, through innovation and experimentation.
- Focus on Impact: Create impact through bias for action and tangible results.
- Serve with Obsession: Build win-win relationships for the long-term by having a customer obsession.
- Regulatory interface - Own day-to-day communications, meetings and reporting with the Bank of Thailand, PDPC, AMLO and other agencies on technology, security and cyber-resilience matters.
- Translation & advisory - Convert Thai-language regulations, circulars and ad-hoc requests into clear English briefs and compliance plans for group stakeholders; advise product squads on regulatory impacts of new features.
- Audit & incident management - Coordinate regulatory and third-party IT audits, penetration tests, incident drills and breach notifications, ensuring all findings are remediated and reported within mandated timelines.
- Risk governance - Maintain the local Technology Risk Register, conduct periodic assessments and drive treatment plans aligned to ISO 27001, NIST CSF, COBIT and MAS TRM.
- Policy localisation - Adapt global IT/Security policies and business-continuity playbooks to meet Thai requirements (e.g., BOT Notification SorNorSor 12/2563, PDPA).
- Cloud & infrastructure oversight - Review architecture designs and change requests for AWS/GCP workloads, validating that security baselines, VAPT evidence and data-residency controls remain audit-ready.
- Training & awareness - Deliver bilingual (Thai/English) security, acceptable-use and incident-response trainings for local employees and vendors.
- 3+ years' hands-on experience in technology risk & compliance, IT audit, cyber-security operations, or IT governance within banking, payments, fintech, or Big-4 advisory.
- Deep knowledge of Thai regulatory frameworks (BOT guidelines, PDPA, AMLO AML/CFT) and familiarity with global standards (ISO 27001, NIST, COBIT, ITIL).
- Demonstrated ability to interpret regulations and translate them into technical controls, processes, and documentation.
- Fluency in Thai (native or equivalent) and strong business-level English, with proven experience drafting official correspondence in both languages.
- Practical understanding of cloud platforms (AWS/GCP/Azure), network & application security, vulnerability management, and incident response.
- Bachelor's degree in Computer Science, Information Systems, Engineering or a related discipline.
- Excellent stakeholder-management and project-management skills; thrives in a fast-moving, multi-cultural environment.
- Certifications such as CISA, CISSP, CRISC, ISO 27001 LA/ISMS, ITIL v4 or AWS Security.
- Experience supporting fintech licence applications or ongoing regulatory engagement in Thailand.
- Exposure to MAS TRM, Data Privacy, PCI-DSS or SOC 2 environments.
- Ability to automate evidence collection using SQL or scripting (Python/Bash).
- Drive Thailand's technology-compliance agenda in a hyper-growth regional fintech serving tens of thousands of SMEs.
- Collaborative, impact-focused culture that rewards experimentation and continuous learning.
- Competitive compensation, comprehensive health insurance, flexible work arrangements, and an annual learning budget.
- Time off - We would love you to take time off to rest and rejuvenate. We offer flexible paid vacations as well as many other observed holidays by country. We also like to have our people take a day off for special days like birthdays and work anniversaries.
- Flexible Working - We believe in giving back the control of work & life to our people. We trust our people and love to provide the space to accommodate each and everyone's working style and personal life.
- Medical Benefits - We offer health insurance coverage for our employees and dependents. Our people focus on our mission knowing we have their back for their loved ones too.
- Mental Health and Wellness - We understand that our team productivity is directly linked to our mental and physical health. Hence we have Wellness Wednesdays and we engage partners to provide well-being coaching. And we have our Great FSMK Workout sessions too to keep everyone healthy and fit!
- Learning & Development - We believe learning should never end and we support everyone with self-learning L&D allowances.
- Tech Support - We provide a company laptop for our employees and the best possible support for the right equipment/tools to enable high productivity