Head of Risk Management - APAC Payments Leader

MOL Accessportal Sdn Bhd; Kuala Lumpur; On-site; MYR 300,000 - 600,000; Full time

Job summary

Razer in Kuala Lumpur, Malaysia seeks Head of Risk Management to lead RG's second-line risk across its e-money and payments entities in Malaysia, Singapore, Thailand and the Philippines. You will own the enterprise risk framework and guide the Risk Management Department, ensuring compliance, customer protection and business resilience.

The role requires managing risk frameworks, appetite, and KRIs while delivering independent risk advice to Boards and Management.

Qualifications

• Must have Bachelor's degree in Risk Management, Finance, Accounting, Actuarial Science, Economics, IT or related field.
• 10+ years in enterprise/operational risk management in banking, payments, e-money, fintech or regulated financial services, incl. 3+ years leading a team.
• Knowledge of regulatory requirements for payment/e-money authorities with regulator inspection experience.
• Hands-on ERM, risk appetite, RCSA, KRIs, incident/loss data, TPRM/outsourcing, BCM.
• Strong understanding of tech, cyber, AI, AML/CFT, fraud and data privacy risk; ability to challenge specialist teams.
• Ability to write Board-quality risk papers for Boards/Senior Management.
• Strong analytical, influencing and stakeholder skills.
• Must meet fit and proper requirements of regulators.
• Professional certs such as PRM, FRM, IRM/CRM or CBCI a plus.
• Experience with GRC tools and risk reporting.
• Experience with regulatory change programmes.

Responsibilities

• Lead, build and develop the Risk Management Department (RMD).
• Set priorities and OKRs for the team.
• Assess capability and resourcing against regulatory obligations across jurisdictions; hire/train/certify accordingly.
• Ensure in-country risk coverage for each RG entity.
• Own and maintain risk frameworks and policies.
• Develop entity-level Risk Appetite Statements for Board approval with KRIs and escalation triggers.
• Monitor and report breaches; provide board/regulator-facing materials.
• Maintain risk registers with owners and mitigation plans.
• Run RCSA programme and second-line review of controls; suggest improvements.
• Oversee incident management, RCA and corrective actions.
• Notify regulators within required timelines.
• Run loss data collection and regulatory risk reporting.
• Approve new products/systems/partnerships in second line.
• Set common risk taxonomy across IT, Cybersecurity, AML/CFT, Data Privacy, Finance.
• Consolidate risk profiles into ERM view for reporting to Risk Committee/Board.
• Agree and maintain RACI with specialist teams for risk assessments and reporting.
• Perform independent second-line reviews where teams sit in first line.
• Own third-party risk framework across lifecycle; due diligence, tiering, contracting, monitoring.
• Identify material outsourcing and support regulator approvals.
• Maintain third-party register and monitor SLAs; address issues.
• Vendor risk assessments across operational, financial, tech, information security and regulatory risks.
• Ensure assessments match vendor risk tier/criticality.
• Own BCM and crisis management framework; coordinate BCM activities.
• Support Board attestations and regulator notifications for material disruptions.
• Align BCM with IT disaster recovery and cyber incident response.
• Act as risk contact for regulator inspections and submissions.
• Track regulatory changes and implementation.

Skills

Leadership

Risk management

Regulatory knowledge

Board reporting

Analytical thinking

Stakeholder management

Communication

Education

Bachelor’s degree in Risk Management or related field

Tools

GRC tools

Job description

Razer in Kuala Lumpur, Malaysia seeks Head of Risk Management to lead RG's second-line risk across its e-money and payments entities in Malaysia, Singapore, Thailand and the Philippines. You will own the enterprise risk framework and guide the Risk Management Department, ensuring compliance, customer protection and business resilience.

The role requires managing risk frameworks, appetite, and KRIs while delivering independent risk advice to Boards and Management.