Risk Strategy Expert

Confidential; Malaysia; On-site; MYR 120,000 - 180,000; Full time

Job summary

Confidential is seeking a risk strategy professional to own and advance risk programs for a core platform domain in Malaysia. You will design and iterate risk strategies, build labels and enforcement mechanisms, and measure performance metrics.

You will use SQL and Python to identify abnormal patterns, then partner with product, algorithm, and engineering to deploy risk logic as engine rules and workflows.

Qualifications

• Experience in risk strategy for account security, abuse prevention, or platform integrity.
• Ability to identify abuse lifecycles and translate them into defense strategies.
• Strong communication to explain risk logic to technical teams.

Responsibilities

• Design, validate, and iterate risk strategies for the owned business scenario.
• Build reusable risk labels, allowlists, blocklists, and tiered enforcement mechanisms.
• Use SQL and Python to detect abnormal patterns and measure recall, FP rate, and loss reduction.
• Collaborate with product, algorithm, and engineering to implement risk engine rules and workflows.

Job description

We are a global digital asset platform serving tens of millions of users across multiple markets. As the business expands across trading, growth, community, and user security, risk strategy has become a core capability behind user trust, marketing efficiency, and platform safety.

About the role

This role will focus on risk strategy for one core platform scenario, such as account security, campaign abuse prevention, or community content governance. You need to understand how bad actors take over accounts, drain marketing budgets, use community content for traffic diversion or fraud, and turn these risks into strategies that can be identified, blocked, and reviewed. We are not looking for a rule operator; we are looking for someone who understands abuse lifecycles and can keep upgrading the defense system.

What you’ll do

• Design, validate, and iterate risk strategies for the business scenario you own
• Build reusable risk labels, allowlists, blocklists, sensitive rules, and tiered enforcement mechanisms
• Use SQL and Python to identify abnormal patterns and measure recall, false positives, leakage rate, and loss reduction
• Work with product, algorithm, and engineering teams to turn risk logic into risk engine rules, model capabilities, or response workflows

What we’re looking for

• You have owned risk strategy in account security, campaign abuse prevention, content risk, anti-fraud, or platform integrity
• You understand how attackers move through registration, account farming, exploitation, monetization, and evasion
• You know risk control cannot be one-size-fits-all, and can balance security, user experience, and business conversion
• You can find abnormal signals from logs, transactions, devices, content, and user behavior, then turn them into deployable strategies
• You can explain risk logic, strategy goals, and success metrics clearly to algorithm and engineering teams