About Agoda
At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world.
Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide.
No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you’re ready to begin your best journey and help build travel for the world, join us.
The Team:
The Risk & Control – Technology Senior Specialist role sits within Risk & Control, part of Finance, acting as Agoda's second line of defense for risk management and providing timely assurance across business, technology, financial, and operational risk. As Agoda scales through innovation and data-driven experimentation, the team plays a critical role in balancing risk management with continued growth.
Agoda is constantly expanding its reach through strategic innovations and data-driven experimentations. As a key stakeholder and enabler of the overall Agoda business, the Agoda Risk and Control team plays a unique role in balancing risk management without stifling innovation and growth.
The Opportunity:
You'll partner across Product, IT, Supply, Commercial, People, Legal, Customer Service, and Finance — engaging at all levels to understand business processes and design technology controls that ensure compliance and sound risk management. As the main point of contact for IT stakeholders and internal/external auditors, this role requires strong leadership and communication skills to coordinate technology risk and compliance efforts across SOX, IT, and audit teams. It is not a policing role: success depends on building trust as a critical partner while proactively managing risk.
The Individual:
The ideal candidate has hands-on experience assessing technology controls across end-to-end business processes — including ICFR, SOX, and IT Operations — identifying technology risks and executing control testing. This is a strong fit for someone who wants to make a meaningful impact balancing growth and risk in a fast-growing, innovative technology business.
Key areas of responsibility (Including but Not Limited To)
-
Support ITGC/ITAC testing and documentation — walkthroughs, risk and gap identification, test procedures, and workpapers.
-
Create and maintain comprehensive documentation, including flow charts, process narratives, and risk and control matrices.
What you'll Need to Succeed:
-
Bachelor's degree in Accounting, Management Information Systems, Computer Science, Computer Engineering, or related field; professional certification (e.g., CISSP, CIA) preferred, or equivalent combination of education and experience.
-
Strong understanding of internal control frameworks (SOX, NIST, CMMC, SOC, ITIL, COBIT, PCI, COSO) and how to apply them from a technology perspective.
It's Great if you have:
-
Certified Internal Auditor (CIA), Certified Information System Auditor (CISA), CISSP, or similar designation.
Please review our Hiring Process Guidelines before your interview — click here to learn how interviewing at Agoda works.
Discover more about working at Agoda
Equal Opportunity Employer
At Agoda, we pride ourselves on being a company represented by people of all different backgrounds and orientations. We prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and innovation. Employment at Agoda is based solely on a person’s merit and qualifications. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics.
We will keep your application on file so that we can consider you for future vacancies and you can always ask to have your details removed from the file. For more details please read our privacy policy.
Disclaimer
We do not accept any terms or conditions, nor do we recognize any agency’s representation of a candidate, from unsolicited third-party or agency submissions. If we receive unsolicited or speculative CVs, we reserve the right to contact and hire the candidate directly without any obligation to pay a recruitment fee.
