Product Manager - Compliance & Risk

Kotak Mahindra Bank; Mumbai; On-site; INR 1,400,000 - 1,800,000; Full time

Job summary

Kotak Mahindra Bank is seeking a senior risk & payments professional to define and oversee the enterprise payment risk strategy and governance across API, platform and mobile channels.

You will establish data privacy and payment-security controls, oversee API access risks, and maintain an enterprise-wide view of risks across the payment lifecycle. Strong regulatory, analytical and cross-functional collaboration skills are essential.

Qualifications

• 6–10 years of experience in banking, payments, risk management or technology risk.
• Experience with risk frameworks, regulatory compliance, exception management and risk monitoring.
• Strong understanding of payment products and associated operational and technology risks.
• Ability to translate regulatory and risk requirements into practical controls.

Responsibilities

• Define and oversee the enterprise payment risk strategy and governance framework across API, platform and mobile channels.
• Establish data privacy, customer protection and payment-security controls aligned with regulatory requirements.
• Provide governance oversight of integration and access-security risks including API credentials and access reviews.
• Maintain an enterprise-wide view of risks across the end-to-end payment lifecycle.
• Oversee payment and fraud incidents with robust root-cause analysis and remediation.
• Develop an integrated payment-risk intelligence and reporting framework from diverse data sources.
• Set the approach for RCSA and control assurance across payment products.
• Provide regulatory reporting governance and data submissions for payments.
• Assess regulatory/tech developments and translate into strategic priorities.
• Drive payment-risk standards and coordinate across Product, Technology, Operations and Risk.

Skills

Risk management

Regulatory compliance

Stakeholder management

Analytical thinking

Education

Finance degree

Banking degree

Technology degree

Risk management cert

Job description

Role & responsibilities

• Define and oversee the enterprise payment risk strategy and governance framework, including risk appetite, standards, key risk indicators and oversight mechanisms across API, platform and mobile channels.

• Establish the strategic direction for data privacy, customer protection and payment-security controls, ensuring alignment with regulatory requirements and the organisations risk appetite

• Provide governance oversight of integration and access-security risks, including the effectiveness of controls relating to API credentials, dormant access and periodic access reviews

• Maintain an enterprise-wide view of risks across the end-to-end payment lifecycle, covering transaction processing, settlement, reconciliation, failures and exceptions.

• Oversee significant payment and fraud incidents, ensuring robust root-cause analysis, thematic assessment and sustainable remediation of underlying product, process, technology and control gaps.

• Develop an integrated payment-risk intelligence and reporting framework, leveraging transaction, fraud, incident, complaint and operational data to identify emerging risks and support management decision-making.

• Set the approach for RCSA and control assurance across payment products and processes, challenging control effectiveness and ensuring material gaps are addressed within agreed timelines

• Provide oversight of regulatory reporting and data submissions relating to payments, ensuring appropriate governance over data quality, accountability and regulatory compliance.

• Assess emerging regulatory, technology and industry developments affecting payments, and translate them into strategic priorities for the organisations risk framework, control environment and product roadmap.

• Drive consistent payment-risk standards and control maturity across businesses and payment products, identifying opportunities for risk-based simplification and process optimisation

• Partner with Technology, Operations, Fraud Risk, Cyber Security, Compliance and Operational Risk leadership to address systemic and cross-functional payment risks and strengthen enterprise resilience.

Preferred candidate profile

• 6–10 years of relevant experience in banking, payments, risk management, transaction banking, payment operations or technology risk.

• Must have experience in risk frameworks, control design, regulatory compliance, exception management and risk monitoring.

• Strong understanding of payment products, transaction flows and associated operational and technology risks. Knowledge of API/H2H integrations will be an added advantage.

• Ability to translate regulatory and risk requirements into practical process and system controls.

• Ability to work effectively across Product, Technology, Operations and Risk functions and influence multiple stakeholders.

• Strong analytical, problem-solving, stakeholder-management and communication skills.

• Graduate/Postgraduate qualification in Finance, Banking, Technology, Risk Management or a related field. Relevant professional certifications would be an advantage.