Risk & Compliance Senior Manager

Joining Razer will place you on a global mission to revolutionize the way the world games. Razer is a place to do great work, offering you the opportunity to make an impact globally while working across a global team located across 5 continents. Razer is also a great place to work, providing you the unique, gamer-centric #LifeAtRazer experience that will put you in an accelerated growth, both personally and professionally.

Job Responsibilities :

The Senior Compliance & Risk Manager will be responsible for building and operating the regulatory compliance framework required to launch and sustain Bank of Thailand (BOT) regulated payment services in Thailand, ensuring full adherence to all license conditions, BOT notifications, AML/CFT requirements, and internal governance standards. The role also covers ongoing legal entity compliance, including management of the Foreign Business License (FBL) and the appointment and oversight of the Data Protection Officer (DPO) function under the PDPA. The role is further responsible for drafting, implementing, and enforcing compliance policies, procedures, and internal controls, and for delivering training and awareness programs for all relevant teams and employees.

1. Regulatory Compliance & BOT Liaison

Own all compliance obligations arising from BOT payment licenses, including adherence to the Payment Systems Act B.E. 2560, BOT notifications, and AMLO regulations; monitor and interpret regulatory changes and communicate obligations to management and key business partners

Serve as the primary point of contact with BOT via the CFR system; coordinate regulatory filings, notifications, license examinations, and audits

Submit quarterly operational readiness reports and pre-launch notifications to BOT within required timelines

Coordinate with internal teams (Legal, Finance, IT, Operations) to ensure alignment with regulatory standards and internal governance requirements

Ensure the company does not facilitate digital assets or cryptocurrency as a payment medium for goods or services

2. AML / CFT & Sanctions

Develop, maintain, and enforce AML/CFT Policy, KYC/CDD Policy, Sanctions Screening, and Risk Assessment Frameworks

Oversee KYC/CDD and Know Your Merchant (KYM) onboarding processes for customers, merchants, and partners in line with BOT requirements

Manage the STR (Suspicious Transaction Report) process and regulatory submissions to AMLO; implement and maintain CFR (Centralized Fraud Registry) mule account detection and response procedures

Conduct periodic AML/CFT risk assessments and prepare management reports

3. Information Security, IT Audit & Pre-Launch Readiness

Coordinate Vulnerability Assessment and Penetration Testing (VA/PT) with external experts across all service channels; track remediation of all identified security risks. Prepare Board-approved VA/PT results for BOT submission.

Oversee the IT audit function: plan and manage IT audit cycles, coordinate with internal or third-party IT auditors, review findings, and ensure timely remediation and reporting to senior management

4. Internal Audit Coordination & Governance

Coordinate and support internal audit activities across compliance, risk, operations, and finance; act as the primary liaison between internal audit and business units

Review internal audit reports, track action plans, and report on remediation progress to the Audit Committee and senior management

Maintain and update the Risk Register, Business Continuity Plan (BCP), Incident Management procedures, and third-party/vendor risk assessments

Review and enhance internal controls embedded in day-to-day operations, in coordination with Business, Operations, IT, and Finance teams

5. Merchant Compliance & Anti-Fraud

Design and operate anti-fraud detection mechanisms; coordinate user and merchant remediation when fraud incidents occur

Monitor ongoing merchant compliance with regulatory and internal risk requirements

6. Foreign Business License (FBL) Management

Own all ongoing obligations under the Foreign Business License (FBL) issued by the Department of Business Development (DBD), Ministry of Commerce

Ensure annual submission of operational reports, audited financial statements, and proof of compliance with FBL conditions to the Ministry of Commerce

Monitor adherence to FBL conditions including equity-to-debt ratio, minimum capital maintenance, director residency requirements, and approved scope of business activities

Coordinate with Legal and Finance to notify DBD of any changes in shareholding structure, directors, or business scope; manage FBL renewal prior to expiry

Coordinate with Legal on document preparation and submission to relevant government agencies (DBD, AMLO, PDPC, BOT, Revenue Department, and others) as required

7. Data Protection Officer (DPO) & PDPA Compliance

Act as, or formally appoint and oversee, the Data Protection Officer (DPO) as required under the Personal Data Protection Act B.E. 2562 (PDPA)

Develop and maintain the company’s personal data protection framework, including Data Protection Policy, Privacy Notice, Consent Management, Data Subject Rights procedures, and Data Retention Policy

Oversee Data Protection Impact Assessments (DPIA) for high-risk processing activities, particularly those involving KYC, biometric data, and transaction monitoring

Manage the Data Breach response process: coordinate internal containment, investigate root cause, and report qualifying breaches to the PDPC within 72 hours; notify BOT where required

Serve as the official point of contact with the PDPC (Personal Data Protection Committee); coordinate responses to PDPC inquiries, complaints, and audits

Deliver PDPA awareness and training programs for all relevant employees; ensure compliance is embedded in product and operational processes

Pre-Requisites :

Razer is proud to be an Equal Opportunity Employer. We believe that diverse teams drive better ideas, better products, and a stronger culture. We are committed to providing an inclusive, respectful, and fair workplace for every employee across all the countries we operate in. We do not discriminate on the basis of race, ethnicity, colour, nationality, ancestry, religion, age, sex, sexual orientation, gender identity or expression, disability, marital status, or any other characteristic protected under local laws. Where needed, we provide reasonable accommodations - including for disability or religious practices - to ensure every team member can perform and contribute at their best.

Are you game?