GRC Analyst

TL;DR

GRC Analyst (Cybersecurity): Supporting operational resilience and security governance programs with an accent on Business Continuity Planning (BCP), Disaster Recovery (DR), and compliance documentation. Focus on coordinating resilience initiatives, supporting security awareness, and managing documentation to ensure robust technology operations.

Location: Must be based in Bangkok, Thailand

Company

hirify.global is a global travel technology company and part of Booking Holdings, connecting millions of travelers with hotels, flights, and unique experiences worldwide.

What you will do

• Create, update, and align Business Continuity Planning (BCP) and Disaster Recovery documentation across departments.
• Support risk assessments, Business Impact Analyses (BIA), and scenario planning activities.
• Coordinate and facilitate BCP/DR workshops and simulation exercises.
• Execute security awareness initiatives, including internal campaigns and communications.
• Assist in tracking and documenting product and security compliance activities.
• Maintain central dashboards and trackers for resilience and governance programs.

Requirements

• Must be based in or able to work in Bangkok, Thailand.
• Strong command of written and spoken English.
• Detail-oriented with strong organizational and documentation skills.
• Proactive mindset with the ability to take ownership of tasks.
• Fast learner, comfortable in a fast-paced environment.
• Ability to manage multiple small tasks and priorities simultaneously.

Nice to have

• Familiarity with Google Suite, Confluence, or Jira.
• Prior exposure to GRC, IT operations, or resilience frameworks (e.g., ISO 22301, ISO 27001, NIST, ITIL).
• Experience in supporting workshops or training sessions.

Culture & Benefits

• Work in a diverse, global team environment.
• Exposure to cybersecurity, risk management, and operational resilience at scale.
• Dynamic, tech-driven company culture centered on travel innovation.
• Structured opportunity for entry-level career development in security governance.