Head of Risk & Compliance (Fintech)

Location: Malaysia; hybrid, with at least 3 days per week in the local office and remaining days available for remote work. Candidates must be based in, or able to work from, the advertised location.

Company

hirify.global builds technology products across Southeast Asia; its Doit App business is developing a Malaysian digital wallet and preparing to apply to Bank Negara Malaysia for approval to issue electronic money.

What you will do

• Own the risk and compliance content of the Bank Negara Malaysia application and manage engagement from pre-application through approval.
• Build and operate the compliance framework, including monitoring plans, registers, breach management, and corrective actions.
• Build the risk management framework, risk appetite statement, and risk register, and report material risks to the Board.
• Oversee customer-fund safeguarding, including separation of electronic money funds and operation of the trust account.
• Own the AML programme, regulatory reporting, conflicts of interest, anti-bribery and corruption, whistleblowing, complaints, and personal data protection.
• Review onboarding, products, disclosures, and marketing; oversee outsourcing partners and deliver compliance training.

Requirements

• Degree or professional qualification from an institution recognised by the Malaysian government.
• 5+ years of relevant financial-services experience, including 3 years in compliance, regulatory, or risk at an institution regulated by Bank Negara Malaysia.
• Experience across both risk management and compliance.
• Command of the Financial Services Act 2013, BNM’s Electronic Money policy document, BNM AML/CFT/CPF requirements, and AMLA 2001.
• Familiarity with BNM requirements for technology risk, outsourcing, electronic know-your-customer, complaints handling, and fair treatment of financial consumers.
• Experience dealing directly with Bank Negara Malaysia on submissions, supervisory queries, and compliance reviews.
• Ability to meet the relevant fit and proper criteria.
• Strong English communication is required.

Nice to have

• Experience taking an electronic money or money services business application through Bank Negara Malaysia to approval.
• CAMS, ICA Diploma in Governance, Risk and Compliance, or an equivalent qualification.
• Experience in payments, electronic money, digital banking, or fintech, including white-label or multi-partner models.
• Familiarity with Shariah-compliant electronic money and the Islamic Financial Services Act 2013.

Culture & Benefits

• Hybrid working arrangement with at least three office days per week and flexibility on the remaining days.
• English is the main working language across global teams.
• The role reports to the Doit App Board, with administrative reporting to the Doit App Chief Executive and hirify.global Head of Risk & Compliance.
• The first year is focused on building the licence application and control function rather than maintaining an established framework.

Hiring process

• Three stages: introductory conversation, regulatory and compliance deep dive, and CEO/final round.
• The process is intended to move quickly, with an offer targeted within one week from the start of interviews for strong candidates; candidates completing assessments quickly are prioritised.