Risk Manager
MOL Accessportal Sdn Bhd
A complete application in a minute
Tailored resume and cover letter, ready to send.
Job summary
Razer in Kuala Lumpur, Malaysia seeks Head of Risk Management to lead RG's second-line risk across its e-money and payments entities in Malaysia, Singapore, Thailand and the Philippines. You will own the enterprise risk framework and guide the Risk Management Department, ensuring compliance, customer protection and business resilience.
The role requires managing risk frameworks, appetite, and KRIs while delivering independent risk advice to Boards and Management.
Qualifications
- Must have Bachelor's degree in Risk Management, Finance, Accounting, Actuarial Science, Economics, IT or related field.
- 10+ years in enterprise/operational risk management in banking, payments, e-money, fintech or regulated financial services, incl. 3+ years leading a team.
- Knowledge of regulatory requirements for payment/e-money authorities with regulator inspection experience.
- Hands-on ERM, risk appetite, RCSA, KRIs, incident/loss data, TPRM/outsourcing, BCM.
- Strong understanding of tech, cyber, AI, AML/CFT, fraud and data privacy risk; ability to challenge specialist teams.
- Ability to write Board-quality risk papers for Boards/Senior Management.
- Strong analytical, influencing and stakeholder skills.
- Must meet fit and proper requirements of regulators.
- Professional certs such as PRM, FRM, IRM/CRM or CBCI a plus.
- Experience with GRC tools and risk reporting.
- Experience with regulatory change programmes.
Responsibilities
- Lead, build and develop the Risk Management Department (RMD).
- Set priorities and OKRs for the team.
- Assess capability and resourcing against regulatory obligations across jurisdictions; hire/train/certify accordingly.
- Ensure in-country risk coverage for each RG entity.
- Own and maintain risk frameworks and policies.
- Develop entity-level Risk Appetite Statements for Board approval with KRIs and escalation triggers.
- Monitor and report breaches; provide board/regulator-facing materials.
- Maintain risk registers with owners and mitigation plans.
- Run RCSA programme and second-line review of controls; suggest improvements.
- Oversee incident management, RCA and corrective actions.
- Notify regulators within required timelines.
- Run loss data collection and regulatory risk reporting.
- Approve new products/systems/partnerships in second line.
- Set common risk taxonomy across IT, Cybersecurity, AML/CFT, Data Privacy, Finance.
- Consolidate risk profiles into ERM view for reporting to Risk Committee/Board.
- Agree and maintain RACI with specialist teams for risk assessments and reporting.
- Perform independent second-line reviews where teams sit in first line.
- Own third-party risk framework across lifecycle; due diligence, tiering, contracting, monitoring.
- Identify material outsourcing and support regulator approvals.
- Maintain third-party register and monitor SLAs; address issues.
- Vendor risk assessments across operational, financial, tech, information security and regulatory risks.
- Ensure assessments match vendor risk tier/criticality.
- Own BCM and crisis management framework; coordinate BCM activities.
- Support Board attestations and regulator notifications for material disruptions.
- Align BCM with IT disaster recovery and cyber incident response.
- Act as risk contact for regulator inspections and submissions.
- Track regulatory changes and implementation.
Skills
Education
Tools
Job description
Job title: Head of Risk Management, Razer Gold
Location: Kuala Lumpur, Malaysia
Reporting line: Reports to the RG Head of Global Operations
Team: Leads the Risk Management Department (RMD)
Summary: Team Razer is the driving force behind Razer's growth.
The Head of Risk Management leads RG's independent second-line risk function across its regulated e-money and payments entities in Malaysia, Singapore, Thailand and the Philippines. You will own the enterprise risk management framework and lead the RMD team. You will make sure RG meets the risk management expectations and standards while providing the Boards and Management independent, risk-based advice that supports sound decisions, customer protection and business resilience.
Lead, build and develop the RMD team.
Set priorities and OKRs.
Assess the team's capability and resourcing against regulatory obligations in each jurisdiction, and close skill gaps through hiring, training and certification.
Make sure the team has adequate in-country risk coverage for each RG entity.
Own and maintain the all relevant risk frameworks, policies.
Develop entity-level Risk Appetite Statements for Board approval, including technology risk appetite, with KRIs, thresholds and escalation triggers.
Monitor and report breaches.
Prepare risk reports and papers for Management, the Risk Committee and the Boards, and act as secretariat to the management Risk Committee.
Maintain entity-level and consolidated RG risk registers with clear owners and mitigation plans.
Run the RCSA programme and second-line review of key controls, and recommend improvements to internal controls.
Oversee incident management, RCA and corrective/preventive actions.
Make sure regulators are notified within each regulator's timelines.
Run loss event data collection and regulatory operational risk reporting.
Give second-line approval for new products, systems, partnerships and material changes.
Set the common risk taxonomy, assessment methodology and appetite framework used by RG's IT, Cybersecurity, FCC (AML/CFT and fraud), Data Privacy and Finance (float safeguarding and liquidity) teams.
Consolidate risk profiles, KRIs, material incidents and losses into the entity-level and RG ERM view, and into Risk Committee and Board reporting.
Agree and maintain a RACI with each specialist team for risk assessments, incident escalation, regulatory notifications and reporting, so there are no gaps or overlaps.
Where a specialist team sits within the first line, carry out independent second-line review of its risk assessments.
Own the third-party risk framework across the lifecycle: due diligence, risk tiering, contracting, monitoring and exit, including intragroup services and sub-contractors.
Identify material outsourcing and support the regulator notifications and approvals required.
Maintain the third-party register and report concentration and cloud risk.
Ensure material service providers are periodically reassessed, and that their performance and SLAs are monitored, with issues escalated and closure tracked.
Conduct risk-based vendor assessments covering operational, financial, technology, information security, data protection and regulatory risks.
Make the depth of each assessment proportionate to the vendor's risk tier and criticality.
Own the BCM and crisis management framework.
Identify critical business services and recovery time objectives, and coordinate BIA, BCP and crisis exercises.
Support Board attestations on BCM, independent BCM audits, and notification of material disruptions to regulators.
Align BCM with IT disaster recovery and cyber incident response, and run joint exercises with the IT and Cybersecurity teams.
Act as the risk point of contact for regulators’ / authorities’ inspections, thematic reviews and information requests.
Own risk-related regulatory submissions and attestations.
Review audit and regulatory findings and validate closure.
Run horizon scanning and gap analysis for regulatory changes, and track implementation.
Work with Razer Group on AI risk management so that material AI risks for RG entities are reflected in the ERM register, risk appetite and new product assessments.
Monitor emerging risks from digitalisation, automation, geopolitics and new business models.
Promote risk ownership through a risk champions network, training and guidance.
Work with the specialist risk teams, Compliance, Internal Audit and Legal on an integrated view of risk, with clear boundaries.
Provide independent advice and constructive challenge to the Boards, Senior Management and stakeholders.
- Must Have Bachelor's degree in Risk Management, Finance, Accounting, Actuarial Science, Economics, IT or a related field.
- 10+ years in enterprise or operational risk management in banking, payments, e-money, fintech or other regulated financial services, including at least 3 years leading a team.
- Working knowledge of the regulatory requirements of financial authorities for payment and e-money institutions, with direct experience of regulator inspections or engagement.
- Hands-on experience with ERM, risk appetite, RCSA, KRIs, incident and loss data, TPRM/outsourcing and BCM.
- Good understanding of technology, cyber, AI, AML/CFT, fraud and data privacy risk to consolidate and challenge specialist teams' assessments, plus working knowledge of safeguarding for payment businesses.
- Ability to write Board-quality risk papers and present with confidence to Boards and Senior Management.
- Strong analytical, influencing and stakeholder skills.
- Must meet the fit and proper requirements of the relevant regulators.
- Good to Have Professional certification such as PRM, FRM, IRM/CRM or CBCI.
- Experience with GRC tools and data analytics for risk reporting.
- Experience with regulatory change programmes.
Razer is proud to be an Equal Opportunity Employer. We believe that diverse teams drive better ideas, better products, and a stronger culture. We are committed to providing an inclusive, respectful, and fair workplace for every employee across all the countries we operate in. We do not discriminate on the basis of race, ethnicity, colour, nationality, ancestry, religion, age, sex, sexual orientation, gender identity or expression, disability, marital status, or any other characteristic protected under local laws. Where needed, we provide reasonable accommodations - including for disability or religious practices - to ensure every team member can perform and contribute at their best.
Are you game? At Razer, you’ll be at the forefront of the most exciting industry in the world: gaming. As gaming evolves, so does the ecosystem that powers it: hardware, software and services. Guided by our mission "For Gamers. By Gamers.", we create cutting-edge products and experiences that define the ultimate gameplay. Staying true to our mission, we’re relentlessly pushing boundaries and leading the charge in AI for gaming, shaping the future of the industry. At Razer, you won’t just witness this evolution; you’ll help drive it. Joining Razer means being part of a global mission to bring gamers closer to the games they love. Whether you’re crafting the next generation of gaming gear or powering our global operations behind the scenes, you’ll take on meaningful work in a truly international, cross-cultural environment.
The journey toward Being Phenomenal isn’t always easy, but gamers excel through teamwork, grit, and problem-solving. Our people are what make Razer exceptional. Together, we’ll take Razer to even greater heights.
Razer is proud to be certified a Great Place to Work® in both the United States and Singapore, and recognized as a Singapore Top Employer by the Top Employer Institute, reflecting our commitment to making your journey here a rewarding one.
Equal Opportunity Employer
At Razer, we believe diverse teams build better ideas and a stronger culture. We are committed to providing an inclusive, respectful, and fair workplace for every employee. We do not discriminate on the basis of race, ethnicity, colour, nationality, ancestry, religion, age, sex, sexual orientation, gender identity or expression, disability, marital status, or any other characteristic protected by the laws of the countries we operate in. We also provide reasonable accommodations where needed — including for disability or religious practices — so every team member can perform and contribute at their best.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
