Assistant Vice President, Operational Risk Management (Risk & Compliance)

Bursa Malaysia Berhad; Kuala Lumpur; On-site; MYR 180,000 - 320,000; Full time

Job summary

Bursa Malaysia Berhad in Kuala Lumpur is seeking a seasoned risk professional to lead and embed Operational Risk Management across the organisation. You will oversee RCSA, incident reporting, KRI monitoring, and risk reporting to management, while guiding business units and projects to strengthen governance and informed decision-making.

We require 8–12 years in risk/compliance, a strong ERM/ORM background, stakeholder engagement skills, and leadership to drive continuous improvement in risk

Qualifications

• Bachelor's degree in Business, Finance, Accounting, Risk Management, Information Technology or related discipline.
• Strong understanding of Enterprise Risk Management (ERM) and Operational Risk Management (ORM) principles, frameworks and practices.
• Minimum 8–12 years of relevant experience in risk management, compliance, audit or related functions, preferably within a financial services or regulated environment.
• Hands‑on experience in core Operational Risk Management areas, including RCSA, incident management, KRI monitoring and risk reporting.
• Proven experience in engaging with business units and stakeholders to support risk identification, assessment and mitigation.
• Experience in preparing risk reports for Management or committees.
• Strong analytical, communication and stakeholder management skills.
• Proficient in MS Office applications, with strong presentation and communication skills.
• Good understanding of Malaysian capital market rules and industry practices.
• Strong leadership skills with the ability to drive outcomes and influence stakeholders.

Responsibilities

• Drive organisation-wide risk reporting to management and governing bodies with minimal supervision.
• Monitor KRI signals and communicate key risk insights to stakeholders and management.
• Assess risk exposures and evaluate mitigation effectiveness to ensure robust controls.
• Identify and analyse emerging risks to support proactive risk management.
• Manage stakeholder engagement across divisions for quality risk inputs.
• Drive continuous improvement of ORM methodologies, processes, and reporting.
• Execute the RCSA process end-to-end, integrate with the GRC system, and ensure consistency of outputs.
• Manage and administer the GRC system for reliability and data integrity.
• Oversee incident management processes and prepare Incident Management Reports.
• Proactively engage Risk & Compliance Representatives to foster a strong risk culture.

Skills

ERM/ORM principles

RCSA management

KRI monitoring

Stakeholder management

Leadership

Education

Bachelor's degree in Business/Finance/Risk Mgmt

Job description

To drive and enhance organisation-wide Operational Risk Management (ORM) implementation through effective risk identification, assessment, monitoring, and reporting. The role serves as a trusted advisor to business and project teams, while driving continuous improvement in risk practices and optimisation of the GRC platform to strengthen governance and support informed decision-making. Key responsibilities include oversight of Risk and Control Self-Assessment (RCSA), GRC system management, incident management, Key Risk Indicator (KRI) monitoring, and Risk & Compliance Representative (RCR) management and engagement, ensuring consistency and timely execution across divisions.

Key responsibilities

Drive the preparation and delivery of organisation-wide risk management reports, ensuring timely, accurate, and insightful reporting to management and governing bodies with minimal supervision.

Drive KRI monitoring to provide early warning signals and track risk movements across the organisation, with timely communication and escalation of key risk insights to stakeholders and management.

Assess risk exposures and evaluate mitigation effectiveness to ensure risks are effectively managed and controls remain robust, while actively tracking and monitoring mitigation actions.

Drive the identification and analysis of emerging risks, delivering forward-looking insights to support proactive risk management and informed decision-making.

Manage stakeholder engagement across divisions to ensure alignment, completeness, and quality of risk inputs.

Drive continuous improvement of ORM methodologies, processes, and reporting to enhance the consistency, completeness, and overall quality of risk outputs across divisions.

Drive the end-to-end execution of the RCSA process, including planning and execution, integration with the GRC system, and alignment with established reporting standards, ensuring consistency, accuracy, and quality of outputs across divisions.

Manage and administer the GRC system, ensuring system reliability, data integrity, and effective user governance.

Manage the incident management process, including the preparation of Incident Management Reports and timely reporting to relevant governing bodies.

Drive proactive engagement of Risk & Compliance Representatives (RCRs) to strengthen risk awareness, ownership, and accountability across divisions, fostering a consistent and embedded risk culture.

Experience / Exposure

Bachelor's degree in Business, Finance, Accounting, Risk Management, Information Technology or related discipline

Strong understanding of Enterprise Risk Management (ERM) and Operational Risk Management (ORM) principles, frameworks and practices

Minimum 8–12 years of relevant experience in risk management, compliance, audit or related functions, preferably within a financial services or regulated environment

Hands‑on experience in core Operational Risk Management areas, including RCSA, incident management, KRI monitoring and risk reporting

Proven experience in engaging with business units and stakeholders to support risk identification, assessment and mitigation

Experience in preparing risk reports for Management or committees

Strong analytical, communication and stakeholder management skills

Proficient in MS Office applications, with strong presentation and communication skills

Good understanding of Malaysian capital market rules and industry practices

Strong leadership skills with the ability to drive outcomes and influence stakeholders

Your application will include the following questions:

• Which of the following types of qualifications do you have?
• How many years experience in Risk Management do you have?
• How many years experience in Operational Risk Management do you have?

We are a holding company which operates and regulates a fully integrated exchange offering the complete range of exchange related facilities. These facilities include trading, clearing, settlements and depository services covering equities, derivatives, offshore listings, bonds and Islamic. There are over 900 companies listed either on the Bursa Malaysia Securities Berhad Main Market or the ACE Market.

Today, we are one of the region’s largest stock exchanges and a leader of Islamic Capital Market products and services, as well as home to the world’s most successful crude palm oil futures contract. World class infrastructure makes us easily accessible and we serve investors from over 60 nations.

To be a Warga Bursa is to be a citizen of the world, not only do we give you a front row seat to Malaysia’s capital markets, we also give you access to a dynamic and international business environment. As the only Exchange in Malaysia, we look for people with a global outlook and the ability to think beyond boundaries.

We are a holding company which operates and regulates a fully integrated exchange offering the complete range of exchange related facilities. These facilities include trading, clearing, settlements and depository services covering equities, derivatives, offshore listings, bonds and Islamic. There are over 900 companies listed either on the Bursa Malaysia Securities Berhad Main Market or the ACE Market.

Today, we are one of the region’s largest stock exchanges and a leader of Islamic Capital Market products and services, as well as home to the world’s most successful crude palm oil futures contract. World class infrastructure makes us easily accessible and we serve investors from over 60 nations.

To be a Warga Bursa is to be a citizen of the world, not only do we give you a front row seat to Malaysia’s capital markets, we also give you access to a dynamic and international business environment. As the only Exchange in Malaysia, we look for people with a global outlook and the ability to think beyond boundaries.

Researching careers? Find all the information and tips you need on career advice.