Senior Specialist, Enterprise Risk Management

Why PayNet / Why Now

• PayNet operates critical national payment infrastructure where risk decisions have systemic impact
• Regulatory expectations, operational complexity, and market scale are increasing simultaneously
• The organisation requires stronger enterprise‑level risk judgment, not incremental controls
• This role exists to elevate risk from reporting to decision‑making
• Timing matters: PayNet needs a confident second line that can challenge, influence, and escalate

TL;DR

• Own enterprise risk governance across a national financial market infrastructure
• Lead risk assessments that inform senior management and Board‑level decisions
• Decide and escalate on material risks, incidents, and control gaps
• Drive risk culture, not just compliance
• Operate with independence, judgment, and accountability

Why This Role Matters

• Protects PayNet’s reputation, participants, and systemic trust in Malaysia’s payments ecosystem
• Translates complex risk signals into clear executive and Board insights
• Enables informed risk‑taking by strengthening governance and control effectiveness
• Acts as a second line of defence with authority to challenge and influence outcomes
• Anchors a strong, practical enterprise risk culture across the organisation

What You Will Actually Do

• Own and drive the implementation of PayNet’s Enterprise Risk Management Framework
• Lead enterprise‑wide risk assessments, including Risk Control Self-Assessment (RCSA) and project risk reviews
• Decide and recommend actions based on risk exposure, control gaps, and incident trends
• Shape risk reporting for Management, Board Risk Committee, Board, and regulators
• Drive continuous improvements to risk governance, processes, and oversight

Examples of This Role in Practice

• Lead a cross‑function risk assessment for a high‑impact payment system change and escalate key risks
• Challenge control design when operational incidents reveal systemic weaknesses
• Present a clear risk narrative to senior management to influence prioritisation decisions
• Coordinate timely operational risk reporting to regulators during heightened scrutiny
• Embed risk considerations into business planning without slowing delivery

What Will Help You Succeed

• Strong grounding in enterprise risk management frameworks and methodologies
• Sound judgment when balancing regulatory expectations with business realities
• Confidence to operate independently and challenge constructively at senior levels
• Ability to synthesise data into clear, decision‑ready insights
• Clear, credible communication with executives, Board members, and regulators