Product Manager - Compliance & Risk

Role & responsibilities

• Define and oversee the enterprise payment risk strategy and governance framework, including risk appetite, standards, key risk indicators and oversight mechanisms across API, platform and mobile channels.

• Establish the strategic direction for data privacy, customer protection and payment-security controls, ensuring alignment with regulatory requirements and the organisations risk appetite

• Provide governance oversight of integration and access-security risks, including the effectiveness of controls relating to API credentials, dormant access and periodic access reviews

• Maintain an enterprise-wide view of risks across the end-to-end payment lifecycle, covering transaction processing, settlement, reconciliation, failures and exceptions.

• Oversee significant payment and fraud incidents, ensuring robust root-cause analysis, thematic assessment and sustainable remediation of underlying product, process, technology and control gaps.

• Develop an integrated payment-risk intelligence and reporting framework, leveraging transaction, fraud, incident, complaint and operational data to identify emerging risks and support management decision-making.

• Set the approach for RCSA and control assurance across payment products and processes, challenging control effectiveness and ensuring material gaps are addressed within agreed timelines

• Provide oversight of regulatory reporting and data submissions relating to payments, ensuring appropriate governance over data quality, accountability and regulatory compliance.

• Assess emerging regulatory, technology and industry developments affecting payments, and translate them into strategic priorities for the organisations risk framework, control environment and product roadmap.

• Drive consistent payment-risk standards and control maturity across businesses and payment products, identifying opportunities for risk-based simplification and process optimisation

• Partner with Technology, Operations, Fraud Risk, Cyber Security, Compliance and Operational Risk leadership to address systemic and cross-functional payment risks and strengthen enterprise resilience.

Preferred candidate profile

• 6–10 years of relevant experience in banking, payments, risk management, transaction banking, payment operations or technology risk.

• Must have experience in risk frameworks, control design, regulatory compliance, exception management and risk monitoring.

• Strong understanding of payment products, transaction flows and associated operational and technology risks. Knowledge of API/H2H integrations will be an added advantage.

• Ability to translate regulatory and risk requirements into practical process and system controls.

• Ability to work effectively across Product, Technology, Operations and Risk functions and influence multiple stakeholders.

• Strong analytical, problem-solving, stakeholder-management and communication skills.

• Graduate/Postgraduate qualification in Finance, Banking, Technology, Risk Management or a related field. Relevant professional certifications would be an advantage.