CP Axtra

Wholesale and retail distributor with omnichannel

Department Manager - Governance, Risk & Compliance

Security Governance, Risk & ComplianceConfirmed live in the last 24 hours

Full-timeBangkok, ThailandNo salary listed

About the Job

Requirements

A bachelor's or master's degree in Computer Science, Information Security, or a related field is required.
At least five years of experience working in IT, with a focus on information security or IT audit, is required.
Knowledge of ISO 27001, PCI DSS, and IT security controls is required.
Exceptional communication, problem-solving, and cross-group collaboration skills are required.
Good command of written and spoken English is required.
Ability to present ideas in business-friendly and user-friendly language is required.

Responsibilities

Understand and interpret requirements across relevant IT risk, cybersecurity, and regulatory areas, and map those requirements against the organization's technology and security policies, standards, and controls.
Develop, establish, maintain, and continuously improve the organization's information security policies, standards, and guidelines, ensuring alignment with business requirements, regulatory obligations, and industry best practices.
Conduct technology risk assessments across applications, infrastructure, products, projects, and operations; identify risks and control gaps; recommend remediation or mitigating controls; and track risks through closure or formal risk acceptance.
Manage the risk acceptance process, ensuring exceptions have appropriate business justification, compensating controls, accountable risk owners, defined expiry dates, and periodic review.
Coordinate with internal audit, external audit, and other stakeholders to support audits and assessments, provide information requested for audits, and regularly report status to IT and Security management.
Define and monitor security KPIs, KRIs, compliance metrics, and management dashboards to measure control effectiveness, risk exposure, remediation progress, and overall security governance maturity.
Perform other related duties as assigned.

Department Manager - Governance, Risk & Compliance (Lotus Nawamin Office)

CP Axtra · Bangkok, Thailand (Hybrid) · Full-time · Posted 2026-09-15

Workplace: hybrid

Department: Technology

Description

Understand and interpret requirements across relevant IT Risk, Cybersecurity, Regulatory and map requirements against the organization’s technology and security policies, standards and control
Develop, establish, maintain, and continuously improve the organization’s Information Security Policies, Standards and Guidelines ensuring alignment with business requirements, regulatory obligations, and industry best practices.
Conduct Technology Risk Assessments across applications, infrastructure, products, projects, and operations. Identify risks and control gaps, recommend appropriate remediation or mitigating controls, and track risks through closure or formal risk acceptance.
Manage the Risk Acceptance process, ensuring exceptions have appropriate business justification, compensating controls, accountable risk owners, defined expiry dates, and periodic review.
Coordinate with internal audit, external audit and other stakeholders to support audit and assessment, provide the information as audit request and regular report status to IT and Security management.
Define and monitor Security KPIs, KRIs, compliance metrics, and management dashboards to measure control effectiveness, risk exposure, remediation progress, and overall security governance maturity.
Perform other related duties as assigned

Requirements

Bachelor's or Master's degree in Computer Science, Information Security, or a related field.
5+ years working in IT filed with a focus on information security or IT audit.
Knowledge of ISO27001, PCIDSS and IT security control
Exceptional communication, problem solving and cross-group collaboration skills
Good command of written and spoken English
Ability to present ideas in business-friendly and user-friendly language

Apply

Apply at CP Axtra

About the Company

CP Axtra

Wholesale and retail distributor with omnichannel

CP Axtra runs wholesale and retail networks in Thailand and across Asia, with two main segments: Makro for B2B wholesale and Lotus's for B2C retail in hypermarkets and supermarkets. It sources goods from suppliers and sells them through its stores and online channels, while also earning from leasing mall space; digital tools like the Makro PRO app and partnerships with Cainiao and Microsoft help manage inventory and personalize shopping. The company combines a large B2B wholesale ecosystem with a broad B2C retail footprint and a unified omnichannel experience to connect physical and online shopping. Its goal is to become a leading RetailTech company in Asia by improving supply chains, expanding its omnichannel reach, and growing its ecosystem of stores, online services, and mall spaces.

Company size: 1,001-5,000
Company stage: IPO
Headquarters: Bangkok, Thailand
Founded: 1988

Recently Posted Jobs

Explore more opportunities at CP Axtra

See more jobs