Regulatory Compliance Lead - Advisory & Assurance

Finexus Group; Kuala Lumpur; On-site; MYR 180,000 - 350,000; Full time

Job summary

Finexus Group seeks a Compliance Manager for Regulatory Advisory & Assurance to oversee advisory across BN M-regulated e-money, merchant acquiring and remittance, plus moneylending and PCI DSS activities. The role is a hands-on second line function supporting product, technology, risk and legal teams while maintaining independence.

You will drive remediation, policy governance and a consolidated control framework, enabling audits and client engagements with clear commercial impact.

Qualifications

• 8–10 years of experience in Compliance, Regulatory, Risk or Assurance.
• Experience in BNM-regulated payments, e-money, banking, or similar products.
• Experience with SOC 2 Type II, ISO 27001 or PCI DSS preferred.
• Strong writing and communication skills for board-level audiences.

Responsibilities

• Lead compliance advisory across Finexus' business lines including BNM-licensed e-money, merchant acquiring and remittance.
• Own the compliance gap register and drive remediation with owners and dates.
• Drive policy lifecycle and governance across internal policies and external certifications.
• Build a consolidated control framework mapping controls to standards (SOC 2, ISO 27001, PCI DSS, etc.).
• Coordinate responses for client questionnaires, audits and regulatory examinations.
• Escalate material regulatory exposure to senior management and the Board.

Skills

Regulatory knowledge

Compliance advisory

Risk assessment

Stakeholder management

Governance & control

Education

ICA, CAMS, ISO 27001 Lead Auditor or CISA

Job description

Finexus Group seeks a Compliance Manager for Regulatory Advisory & Assurance to oversee advisory across BN M-regulated e-money, merchant acquiring and remittance, plus moneylending and PCI DSS activities. The role is a hands-on second line function supporting product, technology, risk and legal teams while maintaining independence.

You will drive remediation, policy governance and a consolidated control framework, enabling audits and client engagements with clear commercial impact.