(GSD) People Tech Security Specialist (Bangkok-based, relocation provided)

**About Agoda** At Agoda, we bridge the world through travel. Our story began in 2005, when two lifelong friends and entrepreneurs, driven by their passion for travel, launched Agoda to make it easier for everyone to explore the world. Today, we are part of Booking Holdings [NASDAQ: BKNG], with a diverse team of over 7,000 people from 90 countries, working together in offices around the globe. Every day, we connect people to destinations and experiences, with our great deals across our millions of hotels and holiday properties, flights, and experiences worldwide. No two days are the same at Agoda. Data and technology are at the heart of our culture, fueling our curiosity and innovation. If you’re ready to begin your best journey and help build travel for the world, join us. **The Opportunity:** We're looking for a People Technology Security Specialist to strengthen and enhance the existing security framework across our People Team platforms. This role will focus primarily on ensuring secure access and data governance within Workday (HRIS), while also supporting related systems such as Greenhouse (ATS), Zendesk, Tableau, and various platforms where security oversight is required. You'll collaborate closely with IT Security, internal and external audit teams, the Data Privacy team, the Employee Relations team, and other stakeholders to drive ongoing improvements to our security framework. You'll be responsible for supporting employee and candidate-related audits, ensuring compliance with GDPR and other data protection regulations, and broadening your expertise across the functional aspects of People systems — because security is integral to everything we do. **In this role, you get to:** Security Architecture & Governance - Take ownership of the security architecture for the People Team across all platforms, including Workday, Greenhouse, Zendesk, and Tableau. - Design, implement, and maintain secure access controls, role-based permissions, and cross-platform security standards. - Build functional knowledge to supplement security responsibilities — understanding how People systems work to make better security decisions. - Maintain up-to-date knowledge of and adherence to best practices in data handling, ensuring all data is managed securely and in compliance with relevant regulations and organisational policies. Compliance & Audit - Be actively involved in SOX audits when necessary, collaborating with internal and external auditors to provide required information and ensure compliance with regulatory standards. - Support employee and candidate-related audits, ensuring data governance and access controls meet GDPR and other data protection requirements. - Partner with the Data Privacy team and IT Security to ensure ongoing compliance with global data protection regulations and organisational policies. Process Improvement & Operations - Lead efforts to continuously improve people data handling workflows — including ticket operations — by identifying process gaps, implementing best practices, and leveraging technology to optimise efficiency and data integrity. - Drive automation and tooling improvements that reduce manual security and compliance overhead while maintaining data accuracy and auditability. - Develop and maintain documentation for security processes, access governance frameworks, and compliance controls. Stakeholder Collaboration & Team Development - Collaborate closely with IT Security, HR, Employee Relations, Data Privacy, and audit teams to align security practices with business needs. - Support, mentor, and potentially lead junior team members — fostering a growth mindset and driving a culture of continuous improvement. - Communicate security requirements and risks clearly to stakeholders at all levels, influencing decisions with data and a solutions-oriented approach. **What You'll Need to Succeed:** - 2+ years of solid project management experience. - Proven experience in implementing Workday security, including: - Cross-platform access control design and role-based permission management - GDPR compliance within Workday and connected People systems - Proven awareness of best practices in data handling, with a commitment to upholding data privacy, security, and compliance in all work activities. - Demonstrated ability to drive continuous improvement in people data handling processes, with experience optimising ticket operations and ensuring adherence to data management best practices. - Strong communication skills with the ability to influence stakeholders at all levels. - Excellent analytical and problem-solving abilities, with keen attention to detail. - Proven ability to build strong relationships within HR and across functional teams. - High sense of ownership, accountability, and a growth mindset. - Familiarity with Scrum/Agile methodologies. - Enthusiasm for learning and adopting new skills. - Proficiency in English (written and spoken). **It's Great If You Have:** - Workday security certifications or formal Workday training (e.g., Workday Pro Security). - Experience working in a SOX-regulated or audit-intensive environment. - Familiarity with Greenhouse, Zendesk, or Tableau from a security or access governance perspective. - Exposure to data privacy frameworks beyond GDPR (e.g., CCPA, PDPA). - Experience in a fast-paced technology or e-commerce company. - Background in HRIS operations or people technology alongside security expertise. #### #### Please review our Hiring Process Guidelines before your interview — click [here](https://careersatagoda.com/interview/) to learn how interviewing at Agoda works. ### **Discover more about working at Agoda** - Agoda Careers [](https://careersatagoda.com/) - Facebook - LinkedIn - YouTube **Equal Opportunity Employer** At Agoda, we pride ourselves on being a company represented by people of all different backgrounds and orientations. We prioritize attracting diverse talent and cultivating an inclusive environment that encourages collaboration and innovation. Employment at Agoda is based solely on a person’s merit and qualifications. We are committed to providing equal employment opportunity regardless of sex, age, race, color, national origin, religion, marital status, pregnancy, sexual orientation, gender identity, disability, citizenship, veteran or military status, and other legally protected characteristics. We will keep your application on file so that we can consider you for future vacancies and you can always ask to have your details removed from the file. For more details please read our [privacy policy](https://careersatagoda.com/privacy-statement). **Disclaimer** We do not accept any terms or conditions, nor do we recognize any agency’s representation of a candidate, from unsolicited third-party or agency submissions. If we receive unsolicited or speculative CVs, we reserve the right to contact and hire the candidate directly without any obligation to pay a recruitment fee.