Risk & Compliance Senior Manager

Joining Razer will place you on a global mission to revolutionize the way the world games. Razer is a place to do great work, offering you the opportunity to make an impact globally while working across a global team located across 5 continents. Razer is also a great place to work, providing you the unique, gamer-centric #LifeAtRazer experience that will put you in an accelerated growth, both personally and professionally.

Job Responsibilities :

1. Regulatory Compliance & BOT Liaison

• Own all compliance obligations arising from BOT payment licenses, including adherence to the Payment Systems Act B.E. 2560, BOT notifications, and AMLO regulations; monitor and interpret regulatory changes and communicate obligations to management and key business partners
• Serve as the primary point of contact with BOT via the CFR system; coordinate regulatory filings, notifications, license examinations, and audits
• Submit quarterly operational readiness reports and pre-launch notifications to BOT within required timelines
• Coordinate with internal teams (Legal, Finance, IT, Operations) to ensure alignment with regulatory standards and internal governance requirements
• Ensure the company does not facilitate digital assets or cryptocurrency as a payment medium for goods or services

2. AML / CFT & Sanctions

• Develop, maintain, and enforce AML/CFT Policy, KYC/CDD Policy, Sanctions Screening, and Risk Assessment Frameworks
• Oversee KYC/CDD and Know Your Merchant (KYM) onboarding processes for customers, merchants, and partners in line with BOT requirements
• Manage the STR (Suspicious Transaction Report) process and regulatory submissions to AMLO; implement and maintain CFR (Centralized Fraud Registry) mule account detection and response procedures
• Conduct periodic AML/CFT risk assessments and prepare management reports

3. Information Security, IT Audit & Pre-Launch Readiness

• Coordinate Vulnerability Assessment and Penetration Testing (VA/PT) with external experts across all service channels; track remediation of all identified security risks. Prepare Board-approved VA/PT results for BOT submission.
• Oversee the IT audit function: plan and manage IT audit cycles, coordinate with internal or third-party IT auditors, review findings, and ensure timely remediation and reporting to senior management

4. Internal Audit Coordination & Governance

• Coordinate and support internal audit activities across compliance, risk, operations, and finance; act as the primary liaison between internal audit and business units
• Review internal audit reports, track action plans, and report on remediation progress to the Audit Committee and senior management
• Maintain and update the Risk Register, Business Continuity Plan (BCP), Incident Management procedures, and third-party/vendor risk assessments
• Review and enhance internal controls embedded in day-to-day operations, in coordination with Business, Operations, IT, and Finance teams

5. Merchant Compliance & Anti-Fraud

• Design and operate anti-fraud detection mechanisms; coordinate user and merchant remediation when fraud incidents occur
• Monitor ongoing merchant compliance with regulatory and internal risk requirements

6. Foreign Business License (FBL) Management

• Own all ongoing obligations under the Foreign Business License (FBL) issued by the Department of Business Development (DBD), Ministry of Commerce
• Ensure annual submission of operational reports, audited financial statements, and proof of compliance with FBL conditions to the Ministry of Commerce
• Monitor adherence to FBL conditions including equity-to-debt ratio, minimum capital maintenance, director residency requirements, and approved scope of business activities
• Coordinate with Legal and Finance to notify DBD of any changes in shareholding structure, directors, or business scope; manage FBL renewal prior to expiry
• Coordinate with Legal on document preparation and submission to relevant government agencies (DBD, AMLO, PDPC, BOT, Revenue Department, and others) as required

7. Data Protection Officer (DPO) & PDPA Compliance

• Act as, or formally appoint and oversee, the Data Protection Officer (DPO) as required under the Personal Data Protection Act B.E. 2562 (PDPA)
• Develop and maintain the company’s personal data protection framework, including Data Protection Policy, Privacy Notice, Consent Management, Data Subject Rights procedures, and Data Retention Policy
• Oversee Data Protection Impact Assessments (DPIA) for high-risk processing activities, particularly those involving KYC, biometric data, and transaction monitoring
• Manage the Data Breach response process: coordinate internal containment, investigate root cause, and report qualifying breaches to the PDPC within 72 hours; notify BOT where required
• Serve as the official point of contact with the PDPC (Personal Data Protection Committee); coordinate responses to PDPC inquiries, complaints, and audits
• Deliver PDPA awareness and training programs for all relevant employees; ensure compliance is embedded in product and operational processes

Pre-Requisites :

Razer is proud to be an Equal Opportunity Employer. We believe that diverse teams drive better ideas, better products, and a stronger culture. We are committed to providing an inclusive, respectful, and fair workplace for every employee across all the countries we operate in. We do not discriminate on the basis of race, ethnicity, colour, nationality, ancestry, religion, age, sex, sexual orientation, gender identity or expression, disability, marital status, or any other characteristic protected under local laws. Where needed, we provide reasonable accommodations - including for disability or religious practices - to ensure every team member can perform and contribute at their best.

Are you game?