Risk Manager

Joining Razer will place you on a global mission to revolutionize the way the world games. Razer is a place to do great work, offering you the opportunity to make an impact globally while working across a global team located across 5 continents. Razer is also a great place to work, providing you the unique, gamer-centric #LifeAtRazer experience that will put you in an accelerated growth, both personally and professionally.

Job Responsibilities :

JD For the positionJob title: Head of Risk Management, Razer GoldLocation: Kuala Lumpur, MalaysiaReporting line: Reports to the RG Head of Global OperationsTeam: Leads the Risk Management Department (RMD)SummaryTeam Razer is the driving force behind Razer's growth.
The Head of Risk Management leads RG's independent second-line risk function across its regulated e-money and payments entities in Malaysia, Singapore, Thailand and the Philippines. You will own the enterprise risk management framework and lead the RMD team. You will make sure RG meets the risk management expectations and standards while providing the Boards and Management independent, risk-based advice that supports sound decisions, customer protection and business resilience.

Leadership & Department Management

• Lead, build and develop the RMD team. Set priorities and OKRs.
• Assess the team's capability and resourcing against regulatory obligations in each jurisdiction, and close skill gaps through hiring, training and certification.
• Make sure the team has adequate in-country risk coverage for each RG entity.
  

Risk Governance, Framework & Appetite

• Own and maintain the all relevant risk frameworks, policies.
• Develop entity-level Risk Appetite Statements for Board approval, including technology risk appetite, with KRIs, thresholds and escalation triggers. Monitor and report breaches.
• Prepare risk reports and papers for Management, the Risk Committee and the Boards, and act as secretariat to the management Risk Committee.
• Maintain entity-level and consolidated RG risk registers with clear owners and mitigation plans.
  

Operational Risk, Incidents & Control Assurance

• Run the RCSA programme and second-line review of key controls, and recommend improvements to internal controls.
• Oversee incident management, RCA and corrective/preventive actions. Make sure regulators are notified within each regulator's timelines.
• Run loss event data collection and regulatory operational risk reporting.
• Give second-line approval for new products, systems, partnerships and material changes.
  

Integrated Oversight of Specialist Risk Areas

• Set the common risk taxonomy, assessment methodology and appetite framework used by RG's IT, Cybersecurity, FCC (AML/CFT and fraud), Data Privacy and Finance (float safeguarding and liquidity) teams.
• Consolidate risk profiles, KRIs, material incidents and losses into the entity-level and RG ERM view, and into Risk Committee and Board reporting.
• Agree and maintain a RACI with each specialist team for risk assessments, incident escalation, regulatory notifications and reporting, so there are no gaps or overlaps.
• Where a specialist team sits within the first line, carry out independent second-line review of its risk assessments.
  

Third-Party & Outsourcing Risk

• Own the third-party risk framework across the lifecycle: due diligence, risk tiering, contracting, monitoring and exit, including intragroup services and sub-contractors.
• Identify material outsourcing and support the regulator notifications and approvals required.
• Maintain the third-party register and report concentration and cloud risk.
• Ensure material service providers are periodically reassessed, and that their performance and SLAs are monitored, with issues escalated and closure tracked.
• Conduct risk-based vendor assessments covering operational, financial, technology, information security, data protection and regulatory risks.
• Make the depth of each assessment proportionate to the vendor's risk tier and criticality.
  

Business Continuity & Operational Resilience

• Own the BCM and crisis management framework. Identify critical business services and recovery time objectives, and coordinate BIA, BCP and crisis exercises.
• Support Board attestations on BCM, independent BCM audits, and notification of material disruptions to regulators.
• Align BCM with IT disaster recovery and cyber incident response, and run joint exercises with the IT and Cybersecurity teams.

Audit, Regulatory Engagement, Reporting & Change

• Act as the risk point of contact for regulators’ / authorities’ inspections, thematic reviews and information requests.
• Own risk-related regulatory submissions and attestations. Review audit and regulatory findings and validate closure.
• Run horizon scanning and gap analysis for regulatory changes, and track implementation.
  

Emerging Risks

• Work with Razer Group on AI risk management so that material AI risks for RG entities are reflected in the ERM register, risk appetite and new product assessments.
• Monitor emerging risks from digitalisation, automation, geopolitics and new business models.
  

Risk Culture & Stakeholder Engagement

• Promote risk ownership through a risk champions network, training and guidance.
• Work with the specialist risk teams, Compliance, Internal Audit and Legal on an integrated view of risk, with clear boundaries.
• Provide independent advice and constructive challenge to the Boards, Senior Management and stakeholders.
  

Pre-Requisites :

Must Have

• Bachelor's degree in Risk Management, Finance, Accounting, Actuarial Science, Economics, IT or a related field.
• 10+ years in enterprise or operational risk management in banking, payments, e-money, fintech or other regulated financial services, including at least 3 years leading a team.
• Working knowledge of the regulatory requirements of financial authorities for payment and e-money institutions, with direct experience of regulator inspections or engagement.
• Hands-on experience with ERM, risk appetite, RCSA, KRIs, incident and loss data, TPRM/outsourcing and BCM.
• Good understanding of technology, cyber, AI, AML/CFT, fraud and data privacy risk to consolidate and challenge specialist teams' assessments, plus working knowledge of safeguarding for payment businesses.
• Ability to write Board-quality risk papers and present with confidence to Boards and Senior Management.
• Strong analytical, influencing and stakeholder skills.
• Must meet the fit and proper requirements of the relevant regulators.

Good to Have

• Professional certification such as PRM, FRM, IRM/CRM or CBCI.
• Experience with GRC tools and data analytics for risk reporting.
• Experience with regulatory change programmes.

Razer is proud to be an Equal Opportunity Employer. We believe that diverse teams drive better ideas, better products, and a stronger culture. We are committed to providing an inclusive, respectful, and fair workplace for every employee across all the countries we operate in. We do not discriminate on the basis of race, ethnicity, colour, nationality, ancestry, religion, age, sex, sexual orientation, gender identity or expression, disability, marital status, or any other characteristic protected under local laws. Where needed, we provide reasonable accommodations - including for disability or religious practices - to ensure every team member can perform and contribute at their best.

Are you game?