Senior IT Governance Specialist

As a Senior IT Governance Specialist at Tokenomics Company Limited, you will oversee and strengthen the IT Governance framework in compliance with SEC Thailand regulations and global standards such as COBIT, ISO 27001, and NIST. You will also serve as IT Committee Secretary, managing committee meetings and executive and board-level reporting for this SEC-licensed digital asset startup in its founding phase.

What you'll do

• Develop and align IT frameworks, policies, and procedures with COBIT 2019, ISO 38500, the Digital Asset Emergency Decree B.E. 2561, and ongoing SEC regulatory updates for brokerage operations
• Conduct IT risk assessments, maintain the IT Risk Register addressing wallet security, smart contract, and cyber threats, manage IT controls, and coordinate internal, external, and SEC audits through to finding resolution
• Prepare IT Committee agendas and board packs 5 days prior, record and distribute minutes within 7 days, track resolutions, and present monthly dashboards and KPIs to the IT Committee, quarterly reports to the Executive Board, and annual governance and risk summaries to the Independent Board
• Maintain and run annual tests and tabletop exercises for IT Business Continuity Plans and Disaster Recovery Plans across Exchange, Custody, and Core Banking systems, set SEC-compliant RTO and RPO targets, manage Cyber Incident Response Plans, and coordinate statutory incident reporting with SEC, Legal, and Compliance
• Enforce ITIL-based change management for core trading, wallet, and high-impact systems, perform pre-go-live risk assessments, and secure required IT Committee approvals for major system changes
• Implement Vendor Risk Management frameworks and conduct due diligence for third parties including Cloud providers, Price Feeds, Custodians, and KYC/AML vendors, enforce Cloud Security Policies for AWS, Azure, and GCP, track vendor risks, and ensure contracts cover security, data protection, and exit strategies
• Assess IT risks and advise on controls for Crypto Exchange, Custody, and Trading platforms, conduct tech due diligence for ecosystem partners and new products
• Support the Data Protection Officer in enforcing PDPA and ISO 27701 compliance, maintain Privacy Policies and Records of Processing Activity, conduct Data Protection Impact Assessments, manage Data Subject Rights workflows, manage data breach incidents, oversee vendor Data Processing Agreements, conduct company-wide PDPA training, and submit regular compliance reports to leadership

What you bring

• Bachelor's degree or higher in Computer Science, IT, Business, or a related field
• Minimum 5 years of experience in IT Governance, IT Audit, or IT Risk within Finance, Securities, Fintech, or Digital Assets
• Strong knowledge of COBIT, ITIL, ISO 27001, NIST, Thai SEC regulations, and PDPA B.E. 2562
• Excellent executive reporting, board presentation, and documentation skills
• Fluency in English
• High attention to detail, strong multi-tasking abilities, and uncompromised professional ethics

Nice to have

• Knowledge of Blockchain, Crypto, and Digital Wallets
• Certifications such as CGEIT, CISA, CISM, CISSP, ISO 27001 Lead Auditor, CIPP/AP, CDPSE, or ISO 27701 Lead Implementer

What we offer

• Hybrid work model (60% on-site, 40% remote)
• Office location in Bangkok, Thailand, near BTS Saphan Khwai

About Tokenomics Company Limited

Tokenomics Company Limited is an SEC-licensed digital asset startup in Thailand, currently in its pre-operational setup phase. The company is building a forward-thinking digital finance ecosystem from the ground up.