Assistant Manager, Enterprise Risk Management

Touch 'n Go Group; Kuala Lumpur; Híbrido; MYR 120.000 - 180.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Office pantry snacks and beverages

Mobile and broadband reimbursement

Flexible leave options

Career development support

Descripción de la vacante

Touch ’n Go Group is seeking a Risk Governance & MARCC Secretariat professional in Malaysia to strengthen its risk management framework. The role covers the second line of defence, overseeing ORM processes, risk reporting, and governance for board committees.

Hybrid work arrangement and flexible hours are available. You will engage with business units to identify and mitigate strategic, operational, and regulatory risks, while ensuring accurate risk data and effective governance practices across

Formación

• Strong analytical, critical thinking and problem-solving skills.
• Ability to conduct risk assessments, challenge risk assumptions and identify control gaps.
• Hybrid work arrangement and flexible hours are available.
• Experience in ERM/ORM, internal audit, compliance or governance is preferred.

Responsabilidades

• Support the implementation, enhancement and continuous improvement of the Enterprise Risk Management Framework and related policies.
• Facilitate enterprise-wide risk identification, assessment, monitoring and reporting activities.
• Assist business units in conducting RCSA with independent challenge on risks, controls and mitigations.
• Conduct risk profiling, trend analysis and thematic reviews to identify emerging risks.
• Prepare and analyse risk reports, dashboards and presentations for MARCC and Management.
• Oversee ORM activities including RCSA, CET, CIM, LED and Incident Management.
• Review risk data submissions for completeness and accuracy.
• Conduct CET and validation exercises as part of second line of defence.

Conocimientos

Analytical skills

Critical thinking

Problem solving

Educación

Bachelor's Degree in Risk Management, Finance, Banking, Accounting, Business Administration, Economics, Actuarial Science, Statistics, Data Analytics, Law, Information Technology, Computer Science or related

Descripción del empleo

We fuel the ideas and ambitions of our people with an environment built on Our DNA of Love, Entrepreneurship, Agility, and Passion - LEAP

We are a culture that empowers everyone to innovate and create solutions that will leave a positive impact on our communities and our nation, Touch ‘n Go will always be here to inspire our talents to grow as leaders and innovators giving you the power to make a difference.

What would you do?

• Support the implementation, enhancement and continuous enhancement of the Company's Enterprise Risk Management Framework, policies, standards, methodologies and practices.
• Facilitate enterprise-wide risk identification, assessment, monitoring and reporting activities to ensure key risks are effectively managed.
• Assist business units in conducting Risk and Control Self-Assessment (RCSA) and provide independent challenge on identified risks, controls and mitigation plans.
• Conduct risk profiling, trend analysis and thematic reviews to identify emerging, strategic and cross-functional risks that may impact the Company's objectives.
• Perform assessment and periodic review of Emerging Risks and Strategic Risks and provide recommendations to Management on risk treatment strategies.
• Prepare, consolidate and analyse risk reports, dashboards and presentations for Management, MARCC and Board Committees.
• Support the periodic review and enhancement of risk management policies, procedures, guidelines and governance documents.
• Support the implementation and administration of Operational Risk Management processes, tools and methodologies.
• Oversee and monitor ORM activities including Risk and Control Self-Assessment (RCSA), Control Effectiveness Testing (CET), Control Issue Management (CIM), Loss Event Data (LED) and Incident Management.
• Review and validate operational risk data submissions to ensure completeness, accuracy and quality of information reported by business units.
• Conduct independent Control Effectiveness Testing (CET) and validation exercises as part of the second line of defence.
• Monitor operational risk incidents, losses, control weaknesses and remediation actions, and upscale significant concerns to Management where necessary.
• Analyse operational risk trends, root causes and key risk indicators to support proactive risk management and decision-making.
• Support regulatory and management reporting requirements relating to operational risk and loss event reporting.
• Act as the Second Line of Defence in reviewing and challenging Risk Assessments for new products, projects, system implementations, strategic initiatives, process changes and significant business activities.
• Facilitate and review project risk assessments to ensure key legal, regulatory, operational, technology, cybersecurity, data privacy, financial, reputational risks and other relevant risks are adequately identified and assessed.
• Evaluate the adequacy of existing and proposed mitigating controls and provide recommendations to strengthen risk management controls and governance.
• Perform Pre-validation reviews prior to project or product implementation to assess readiness, completeness and effectiveness of approved risk mitigation actions before Go-Live.
• Perform Post-Implementation Reviews (PIR) for approved Risk Assessments to validate implementation status and effectiveness of mitigating controls, identify control gaps and recommend corrective actions where necessary.
• Monitor and track implementation of risk treatment actions arising from approved Risk Assessments.
• Maintain and monitor the Risk Assessment repository and ensure timely review, reporting and escalation of key project risk issues.

Risk Governance & MARCC Secretariat

• Serve as Secretariat for the Management Audit, Risk and Compliance Committee (MARCC) and any special MARCC meetings.
• Coordinate MARCC meetings, including annual meeting schedules, meeting logistics and stakeholder engagement.
• Prepare meeting agendas and coordinate submission and circulation of papers, risk reports and presentation materials for MARCC review with business units.
• Record, prepare and finalise accurate meeting minutes, resolutions, decisions and action items arising from MARCC meetings.
• Ensure timely circulation of meeting notices, papers, minutes and action trackers to committee members and relevant stakeholders.
• Monitor and track closure of MARCC action items and provide status updates to Management and the Committee.
• Prepare briefing notes and key risk insights for the Chief Risk, Regulatory and Compliance (CRCGO) Officer highlighting significant discussions, decisions, risk concerns and key takeaways arising from MARCC meetings, and present the updates during the monthly Risk Management Division (RMD) post-mortem meeting.
• Develop and conduct risk awareness programmes, workshops, training sessions and knowledge-sharing initiatives to strengthen risk culture across the organization.
• Provide guidance and advisory support to business units on risk management methodologies, tools and best practices.
• Promote risk awareness and the consistent application of risk management practices across the organisation.
• Support risk transformation and continuous improvement initiatives aimed at strengthening risk management capabilities, governance and reporting effectiveness.

Monitoring, Reporting & Administration

• Monitor and track closure of audit findings, risk issues and corrective action plans relating to risk management activities.
• Monitor contracts, vendor arrangements and other risk-related obligations from a risk governance perspective where applicable.
• Maintain risk documentation, records and repositories to ensure completeness, accuracy and compliance with governance requirements.
• Undertake any other risk management, governance, reporting or strategic initiatives as assigned by Management from time to time.

Who should join us?

• Bachelor's Degree in Risk Management, Finance, Banking, Accounting, Business Administration, Economics, Actuarial Science, Statistics, Data Analytics, Law, Information Technology, Computer Science or other related disciplines.
• Professional certification in Risk Management (e.g. ISO 31000, ERM Professional, Certified Risk Management Professional (CRMP), Professional Risk Manager (PRM), Financial Risk Manager (FRM), Certification in Risk Management Assurance (CRMA), or related disciplines would be an added advantage.
• Minimum 4-6 years of relevant experience in Risk Management, ERM, ORM, Internal Audit, Compliance, Governance or related fields, preferably in the financial services industry.
• Strong knowledge and understanding of Enterprise Risk Management (ERM), Operational Risk Management (ORM), Project Risk Assessment, risk governance principles and regulatory requirements.
• Strong analytical, critical thinking and problem-solving skills with the ability to identify, assess and evaluate risks and control effectiveness.
• Ability to conduct risk assessments, challenge risk assumptions, identify control gaps and recommend practical risk mitigation measures.
• Hybrid work arrangement and flexi hours.
• Unlimited office pantry fruits, snacks and drinks.
• Mobile and broadband subscription reimbursement.
• Flexibility to opt dependents coverage (spouse, child, parents or parents-in-law) for outpatient medical benefits.
• Additional leave including family leave and paid care leave to care for family members.
• Medical coverage including dental, optometrist, mental care, maternity, registered
• Traditional Chinese Medicine ("TCM") and Chiropractic.
• Corporate membership discount and many more to explore.

We believe that you have what it takes to fit into the Touch ‘n Go family and help revolutionize the Fintech industry by paving the way to a cashless society. If you're ready to take the next step,

Touch ‘n Go is an organization that strives to provide Equal Opportunity Employment, based on merit, qualifications, capabilities, and calibre. It is Touch ‘n Go’s policy to not discriminate based on age, race, religion, colour or other personal status, identity or characteristics. Fair Opportunity is Our Value and Practice. Please advise us of any accommodations you may need by e-mailing: [e-mail]

Note: Only shortlisted candidates will be contacted.