Description
About the role
We are looking for a rigorous and forward-looking Manager – Enterprise Risk Management (ERM) to build and operationalise the risk management framework for our RBI-regulated fintech business. As a licensed Payment Aggregator (PA) and Prepaid Payment Instruments (PPI) operator, we are required to maintain robust risk governance structures across financial, operational, technology, and compliance risk dimensions. You will own the ERM lifecycle—from risk identification and assessment to treatment, monitoring, and Board reporting—ensuring that risk management is embedded in how we make decisions and operate at scale.
What you'll do
ERM Framework & Risk Governance
- Design, implement, and continuously improve the Enterprise Risk Management framework—encompassing risk appetite statement, risk categories, assessment methodology, and treatment protocols.
-
- Maintain the organisational risk register, ensuring risks are identified, assessed, owned, and tracked to resolution across all functions.
-
- Facilitate periodic enterprise risk assessments with functional heads; challenge risk owners to provide realistic assessments and credible mitigation plans.
-
- Prepare risk reports and dashboards for senior management and the Board Risk Committee, including Key Risk Indicators (KRIs) and emerging risk flags.
Operational & Technology Risk
- Assess and monitor operational risks across payment processing, merchant operations, escrow management, and customer support—including process failures, vendor dependencies, and single points of failure.
-
- Own the Business Continuity Plan (BCP) and Disaster Recovery (DR) programme; ensure plans are tested, updated, and aligned with RBI requirements for critical payment infrastructure.
-
- Work with the Technology team to assess IT and cybersecurity risks, including third-party/vendor risk assessments and cloud risk considerations.