Enterprise & Operational Risk Manager

StashAway; Kuala Lumpur; Hybrid; MYR 180,000 - 300,000; Full time

Benefits offered by this job

Employee stock options

Comprehensive insurance coverage

Management fee discount

Flexible work arrangements

Work-from-anywhere up to 8 weeks

Unlimited paid annual leave

Personal equipment budget

Annual L&D budget

Team bonding budget

Annual off-sites

Job summary

StashAway is seeking a Risk Manager to support the Group Chief Compliance & Risk Officer in strengthening and scaling the Group-wide Enterprise Risk Management framework across multiple jurisdictions and business lines.

This hands‑on role focuses on operational risk across the organisation, partnering with Country Management, Product, Operations, Compliance, Finance, Data and Technology to embed robust risk practices while modernising and automating risk management with no‑code/low‑code

Qualifications

• 7–8+ years of experience in Operational Risk, Enterprise Risk, Business Risk, Audit, or Internal Controls.
• Degree in Risk Management, Finance, Accountancy, Business, or related discipline preferred.
• Curiosity for AI, process optimization, and no-code/low-code platforms; builder mentality to translate operational friction into scalable workflow solutions.

Responsibilities

• Develop, enhance and implement the Group ERM framework across StashAway entities.
• Manage RCA, issue and incident management, KRIs, thematic reviews and risk reporting.
• Maintain oversight of operational risks across business, operations and product functions.
• Partner with stakeholders to strengthen controls and drive scalable risk mitigation.
• Support vendors, outsourcing, new products, country launches risk management.
• Drive risk awareness and embed a strong risk culture through governance and training.
• Prepare risk dashboards and materials for senior management, risk committees and Board.
• Lead evolution of risk infrastructure including risk registers and third‑party risk inventories.
• Build scalable operational workflows using automation and AI-enabled tooling.
• Collaborate with automation, data and engineering teams to modernise risk processes.

Skills

Operational Risk

Enterprise Risk

Business Risk

Audit

Internal Controls

AI curiosity

Low-code/no-code

Builder mindset

Cross-functional leadership

Education

Degree in Risk Management / Finance / Accountancy / Business

Tools

Grist

Workflow automation tools

AI agents

Integrations

Job description

The Risk Manager will support the Group Chief Compliance & Risk Officer (CCRO) in strengthening and scaling StashAway’s Group-wide Enterprise Risk Management (“ERM”) framework across multiple jurisdictions and business lines.

This role sits within the Group Risk & Compliance function and focuses on business and operational risk management across the organisation, excluding dedicated technology and cyber risk ownership. The individual will work closely with Country Management, Product, Operations, Compliance, Finance, Data, and Technology teams to embed strong risk management practices while modernising and automating the way risk is managed across the Group.

This is a hands‑on role for someone who combines strong operational risk fundamentals with a builder mindset. The ideal candidate is curious about AI, automation and agentic workflows, and is excited to leverage no-code/low‑code tools and AI‑enabled processes to improve how business processes and controls across various teams in the Group can be re‑set.

What you’ll work on

• Support the development, enhancement and implementation of the Group Enterprise Risk Management framework across StashAway entities.


• Manage and coordinate key enterprise risk management processes including Risk & Control Assessments (RCA), issue and incident management, Key Risk Indicators (KRIs), thematic reviews and risk reporting.


• Maintain oversight of operational risks across business, operational and product functions, ensuring risks are identified, assessed, tracked and escalated appropriately.


• Partner with business stakeholders to strengthen the control environment and drive practical, scalable risk mitigation measures.


• Support business owners in managing operational risks relating to vendors, outsourcing, new products, strategic initiatives and country launches.


• Drive risk awareness and embed a strong risk culture across teams through engagement, governance processes and training initiatives.


• Prepare risk dashboards, management reporting and materials for senior management, risk committees and Board discussions.


• Lead the evolution of the Group’s risk infrastructure and repositories, including risk registers, incident repositories, action trackers and third‑party risk management inventories.


• Build and maintain scalable operational workflows using automation, AI‑enabled tooling and no‑code/low‑code platforms (e.g. Grist, workflow automation tools, AI agents and integrations).


• Work closely with internal automation, data and engineering teams to identify opportunities to streamline and modernise risk management and compliance processes.


• Design practical workflows that reduce manual administrative effort across compliance, risk management activities and improve data quality, traceability and reporting.


• Support the development of intelligent dashboards, automated reporting and risk analytics capabilities for management oversight.


• Explore and experiment with emerging AI and agentic tooling to improve operational efficiency within the Risk function.

Who are we looking for

• 7–8+ years of experience in Operational Risk, Enterprise Risk, Business Risk, Audit, or Internal Controls within financial services, fintech, or tech‑enabled businesses.


• Degree in Risk Management, Finance, Accountancy, Business, or a related discipline preferred.


• Strong understanding of enterprise and operational risk management frameworks, governance principles, and internal control practices.


• High curiosity for AI, process optimization, and low‑code/no‑code platforms, with a builder mentality to translate operational friction into scalable workflow solutions alongside technical teams (coding experience not required).


• Exceptional problem‑solving, organizational skills, and attention to detail, backed by a hands‑on, self‑starter approach in a fast‑paced environment.


• Good communication and interpersonal skills, with a proven ability to lead cross‑functional risk initiatives, influence senior stakeholders, and collaborate effectively within a multicultural team.

Employee financial and physical well‑being

• Compensation package: You will receive a competitive total compensation package that includes employee stock options if you are a full‑time employee.


• Comprehensive insurance coverage: Outpatient GP clinic visits, Outpatient specialist cover, and group hospitalisation and surgical insurance, and dental cover


• Management fee discount: You will receive an employee discount on your asset management fees when you invest with StashAway.

Flexible work arrangements and policies

• Flexible work arrangements: With manager setting team schedules with a minimum of 2 days a week in the office.


• Work‑from‑anywhere policy: You may request to work remotely for up to eight weeks in another country.


• Unlimited paid annual leave: It should be simple for you to decide if you would like to take more or fewer days off. We trust that you are accountable for your work and know best if you need 10 or 30 days of paid annual leave that year.


• Personal work equipment budget: It’s important that you have a workstation that’s optimal for you wherever you are.

Learning and development opportunities

• Annual L&D budget: You will be given an annual Learning and Development budget to help you continuously learn in your pursuit of your professional and personal development. You may use the budget for resources and tools that may help you perform better at work.

Team bonding budget and initiatives

• Quarterly team bonding budget: We encourage you to socialise with colleagues across job functions, departments, and entities to know them better as individuals beyond what they professionally do.


• Annual off‑sites (Q4): Each off‑site gathers all employees for a full day of company‑wide team bonding activities and challenges.