NGO - Governance, Risk & Board Support Lead

Paynet; Malaysia; On-site; MYR 180,000 - 360,000; Full time

Job summary

BrioHR Pte Ltd is seeking a seasoned governance and risk professional to strengthen enterprise risk management, policy governance and audit remediation across the organization. You will partner with senior leadership and the Board to provide transparent risk insights and timely governance actions.

This role requires independence, strong communication, and the ability to drive governance disciplines in a regulated, multi-market environment.

Qualifications

• Experience building governance, risk and compliance programs.
• Ability to translate risk into actionable management actions and reports.
• Proven ability to partner with Boards or committees and senior leaders.
• Strong understanding of policy governance and control oversight.
• Familiarity with audits, regulatory reviews and remediation activities.
• Ability to maintain independence and report concerns transparently.

Responsibilities

• Build and maintain governance, risk, policy and control frameworks aligned with Board authorities.
• Shape Board/Committee calendars and drive decision-ready materials to closure.
• Coordinate enterprise risk assessments and challenge owners on exposures.
• Monitor policy compliance, control effectiveness and regulatory commitments with clear ownership.
• Lead internal and external audits and governance-related reviews.
• Produce concise risk reporting for the CEO, Board and management.

Skills

Governance

Enterprise risk

Regulatory compliance

Audit remediation

Stakeholder communication

Job description

Why Nexus Global Operator / Why Now

• Shape the governance and risk foundations supporting Nexus Global Operator
• Build practical governance disciplines for a regulated organization operating across markets, shareholders and ecosystem partners
• Give the CEO and Board transparent insight into risks, control weaknesses and emerging governance concerns
• Establish scalable governance practices as the organization, operating model and regulatory obligations evolve
• Work across leadership, operational teams and external stakeholders to strengthen accountability and organizational trust

TL;DR

• Own and continuously improve the governance, enterprise risk, policy and control frameworks supporting Nexus operations
• Enable effective Board and Committee decision-making through disciplined planning, reporting and action tracking
• Turn enterprise risks, control weaknesses and audit findings into clear priorities for the CEO and management
• Coordinate audits, regulatory reviews and assurance activities, ensuring commitments are supported by evidence and closed on time
• Maintain the independence required to report material risks and governance concerns transparently
• Build the governance rhythm, reporting and records required for an accountable and audit-ready organization

Why This Role Matters

• Give the CEO and Board a reliable view of principal risks, control effectiveness and remediation priorities
• Ensure governance decisions, delegated authorities and management commitments are documented and followed through
• Strengthen decision-making by connecting strategic, operational, technology and third-party risks
• Protect regulatory and shareholder confidence through complete records, transparent reporting and timely action
• Prevent audit findings and control weaknesses from remaining unresolved or recurring across the organization
• Create a consistent governance operating model without introducing unnecessary complexity into a lean organization

What You Will Actually Do

• Build and maintain the governance, enterprise risk, policy and control frameworks, keeping them aligned with Board-approved authorities
• Shape Board and Committee calendars, coordinate decision-ready materials and drive resolutions and management actions to closure
• Facilitate enterprise risk assessments, challenge risk owners and escal… exposures that exceed approved tolerances
• Monitor policy compliance, control effectiveness, audit findings and regulatory commitments through clear ownership and evidence
• Lead the coordination of internal audits, external audits, regulatory reviews and governance-related shareholder requirements
• Produce concise governance and risk reporting that helps the CEO, Board and management decide where intervention is required

Examples of This Role in Practice

• An emerging operational risk could disrupt Nexus services: challenge the assessment, test the proposed mitigation and elevate the exposure through the appropriate governance forum
• A Board paper lacks a clear recommendation or complete supporting evidence: work with the accountable executive to make it decision-ready before circulation
• An audit finding remains open beyond its target date: identify the barrier, challenge the action owner and elevate when the residual risk is no longer acceptable
• Several policies have overlapping requirements and unclear ownership: simplify the framework, establish accountable owners and implement a practical review cycle
• A regulator requests evidence that a governance commitment has been completed: coordinate a traceable response and validate that the underlying action is operating effectively
• The risk dashboard indicates a deteriorating control environment: identify the underlying pattern and recommend where management or Board intervention is needed

What Will Help You Succeed

• Bring 8+ years of relevant experience across governance, enterprise risk, compliance, audit or corporate governance
• Demonstrate practical experience supporting Boards or Board Committees and working with senior executives on governance matters
• Apply strong knowledge of enterprise risk frameworks, policy governance, control oversight and audit remediation
• Navigate regulated environments with the independence and judgment to challenge owners and report concerns transparently
• Produce clear Board papers, risk dashboards and executive reporting from complex or incomplete information
• Strengthen your practice through qualifications such as CGQP, ICA Governance, Risk and Compliance, CRISC, CISA, CIA or ISO 31000, with payments or financial-services experience an advantage