Risk Management (Senior - Assistant Manager)

About the Role

We are looking for a hands-on professional to support Enterprise Risk Management (ERM) as part of the second line of defense. This role works closely with business, IT, Security, Operations and HR to manage risks, strengthen controls, and ensure compliance—especially in a health insurance environment with sensitive health data.

Key Responsibilities

Risk Management

• Maintain and enhance the ERM framework (ISO 31000 / COSO)
• Facilitate Risk & Control Self-Assessments (RCSA) and maintain risk registers
• Identify, assess, and monitor operational, compliance, IT, third-party and data risks
• Track Key Risk Indicators (KRIs), incidents, and remediation actions
• Support Risk Management Committee meetings and risk reporting
• Coordinate with Internal Audit and Information Security on control effectiveness

Governance & Coordination

• Prepare dashboards and management / committee reports
• Monitor regulatory developments (PDPA, OIC, cybersecurity-related guidelines)
• Support compliance monitoring and issue follow-up

Qualifications & Experience

• Bachelor’s degree in Risk Management, Law, Business, or related fields
• Certifications such as CIPM, CIPP, CRISC, ISO 27001, CISA, or CIA are an advantage
• 3-5 years’ experience in Risk Management insurance company is preferably
• Experience with ERM, RCSA, control mapping, and management reporting
• Ability to translate regulatory requirements into practical business controls
• Good communication skills in Thai and English
• Strong Excel and reporting skills