Established in 2008, Geidea epitomizes customer focused empowerment and commercial success through continuous innovation. Geidea makes best in class digital payment solutions available for all by attracting and leveraging the best creative & entrepreneurial talent in the market. Our solutions give any business the chance to get ahead and reach for more no matter their size or maturity. Our technology mirrors our people - Smart, Innovative & Forward Thinking: www.geidea.net

Note: Notice up to 1 month or immediate joiners preferred

Pay: Upto 12 LPA + Yearly performance linked bonus + Insurance benefits

Location: Manyata Tech Park, Bangalore India

1. Job Purpose The Manager – Operational Risk, Business Continuity & Fraud Risk is responsible for identifying, assessing, monitoring, and mitigating operational risks, ensuring business continuity and operational resilience, and managing fraud risk across the organization. The role will establish and maintain effective risk management frameworks, policies, procedures, controls, and monitoring mechanisms to minimize operational losses, prevent and detect fraud, ensure business continuity during disruptions, and support compliance with applicable regulatory requirements, card scheme rules, and internal risk appetite.

The role will work closely with Operations, Technology, Information Security, Compliance, Finance, Customer Service, Merchant Onboarding, and other business functions to ensure risks are proactively identified, control weaknesses are addressed, and incidents are managed effectively.

2. Key Responsibilities

A. Operational Risk Management

- Implement and maintain the operational risk management framework in line with the organization's risk appetite, policies, and regulatory requirements.
- Conduct Risk and Control Self-Assessments (RCSAs) across business functions and maintain an operational risk register.
- Identify, assess, and monitor operational risks arising from merchant acquiring, payment processing, settlement, reconciliation, refunds, chargebacks, technology operations, third-party dependencies, and other business activities.
- Establish and monitor Key Risk Indicators (KRIs), thresholds, and early-warning indicators to identify emerging risks and control weaknesses.
- Maintain an incident and loss-event register, ensuring appropriate severity classification, timely escalation, root cause analysis (RCA), corrective actions, and closure validation.
- Monitor recurring incidents, operational failures, service disruptions, processing delays, settlement issues, and control breaches, ensuring sustainable remediation.
- Challenge business owners on overdue risk actions, control deficiencies, and repeated incidents.
- Review and maintain risk policies, procedures, Standard Operating Procedures (SOPs), and control documentation.
- Track risk acceptance, policy exceptions, control overrides, and remediation plans through formal governance mechanisms.
- Prepare operational risk reports, dashboards, and management updates for senior management and Risk Committees.

B. Business Continuity Management (BCM) and Operational Resilience

- Develop, implement, and maintain the Business Continuity Management (BCM) framework and Business Continuity Plans (BCPs).
- Conduct Business Impact Analyses (BIAs) to identify critical business services, processes, systems, dependencies, and recovery requirements.
- Establish and periodically review Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs), in coordination with business and technology owners.
- Maintain and test business continuity, disaster recovery, crisis management, and emergency response plans.
- Coordinate periodic BCP exercises, tabletop simulations, disaster recovery tests, and scenario-based resilience assessments.
- Ensure business continuity arrangements address payment processing, merchant services, settlement, customer support, critical vendors, cloud infrastructure, and other material dependencies.
- Monitor remediation actions arising from continuity tests, technology disruptions, and resilience assessments.
- Support incident response and crisis management, including stakeholder coordination, escalation, communications, and recovery tracking.
- Assess third-party and outsourcing resilience risks, including service availability, disaster recovery capabilities, concentration risk, and exit arrangements.
- Maintain business continuity documentation,



contact lists, escalation protocols, and evidence of testing and approvals.
- Coordinate with Technology, Information Security, Compliance, and relevant stakeholders to support compliance with applicable CBUAE business continuity and operational resilience requirements.

C. Fraud Risk Management

- Develop and maintain the fraud risk management framework, fraud risk assessments, and fraud prevention and detection controls.
- Identify fraud risks across merchant acquiring, payment transactions, refunds, chargebacks, merchant onboarding, terminal usage, key-entry transactions, and other relevant payment channels.
- Monitor fraud trends, suspicious transaction patterns, abnormal declines, transaction anomalies, merchant behaviour, and emerging fraud typologies.
- Define and monitor fraud-related KRIs, thresholds, alerts, and escalation triggers.
- Review fraud incidents and suspected fraud cases, coordinate investigations with relevant teams, and ensure timely escalation and documented outcomes.
- Conduct root cause analysis of fraud events and recommend improvements to preventive, detective, and corrective controls.
- Review the effectiveness of fraud monitoring rules, alert handling, case management, and fraud reporting processes.
- Coordinate with Operations, Merchant Risk, Compliance/AML, Technology, and card scheme teams on fraud investigations and control enhancements.
- Monitor fraud-related chargebacks, suspicious merchant activity, transaction abuse, refund abuse, and potential merchant collusion.
- Support the review of fraud-related merchant restrictions, transaction holds, facility suspensions, and termination recommendations in accordance with approved policies and Delegation of Authority (DOA).
- Ensure fraud incidents and material exposures are reported through the appropriate internal governance and regulatory escalation channels.
- Maintain fraud incident records, investigation evidence, management reporting, and remediation tracking.
- Recommend enhancements to fraud detection capabilities, automation, analytics, and monitoring systems.

D. Governance, Reporting and Regulatory Support

- Ensure operational risk, business continuity, and fraud risk activities are performed in accordance with approved policies, procedures, and the applicable regulatory framework.
- Support regulatory reviews, internal audits, external audits, and card scheme assessments by providing relevant documentation and evidence.
- Maintain a central repository of risk assessments, incident records, BCP test results, fraud reports, action plans, and control evidence.
- Prepare periodic risk dashboards covering incidents, fraud trends, KRIs, BCP readiness, overdue actions, and emerging risk exposures.
- Escalate material incidents, significant control failures, potential regulatory breaches, and overdue high-risk actions to the Head of Risk.
- Track findings from audits, regulatory reviews, risk assessments, and management reviews until closure.
- Support the development and periodic review of risk policies, control standards, escalation matrices, and the DOA framework.

E. Stakeholder Management and Control Assurance

- Work with business and support functions to embed risk ownership and accountability within day-to-day operations.
- Challenge inadequate controls and ensure that risk mitigation actions are proportionate to the identified exposure.
- Coordinate with Technology and Information Security on system outages, cyber-related disruptions, access controls, and technology-related operational risks, while respecting functional ownership.
- Ensure appropriate segregation of duties across transaction initiation, review, approval, execution, and reconciliation.
- Review the effectiveness of controls over sensitive activities, including key-entry access, refunds, transaction holds and releases, and merchant facility exceptions.
- Monitor action owners and target dates, escalating delays where risk exposure remains unresolved.
- Promote risk awareness and deliver training on operational risk,



incident reporting, fraud prevention, and business continuity.

3. Key Deliverables The role will be accountable for maintaining and delivering the following:

- Operational Risk Register and Risk and Control Self-Assessments (RCSAs).
- Operational incident, loss-event, and root cause analysis register.
- Key Risk Indicator (KRI) dashboard and periodic risk reporting.
- Business Impact Analysis (BIA) and Business Continuity Plans (BCPs).
- Annual BCP testing programme and documented test results.
- Disaster recovery and business resilience action tracker.
- Fraud Risk Assessment and fraud monitoring dashboard.
- Fraud investigation and incident reporting register.
- Corrective and Preventive Action (CAPA) tracker.
- Risk policies, procedures, control documentation, and escalation matrix.
- DOA and segregation-of-duties control review for relevant operational and fraud-related activities.
- Periodic management and Risk Committee reporting.

4. Key Performance Indicators (KPIs)

Performance will be measured against agreed targets, including:

- Timely completion and periodic review of operational risk assessments.
- Percentage of material incidents with completed RCA and corrective action plans.
- Reduction in recurring incidents and preventable operational losses.
- Timely closure of high-risk remediation actions.
- Timely escalation and reporting of material incidents.
- Completion of scheduled BCP and disaster recovery tests.
- Achievement of agreed recovery objectives during resilience exercises.
- Closure of findings identified during BCP testing and risk assessments.
- Effectiveness of fraud detection and prevention controls.
- Timely investigation and resolution of fraud alerts and incidents.
- Reduction in preventable fraud losses and recurring fraud patterns.
- Timely submission and accuracy of risk dashboards and management reports.
- Compliance with applicable policies, regulatory requirements, and internal control standards.

5. Qualifications and Experience

Education

- Bachelor's degree in Risk Management, Finance, Business Administration, Information Systems, or a related discipline.
- Relevant professional certifications in risk management, business continuity, fraud prevention, or operational resilience are desirable.

Experience

- 5–8 years of relevant experience in operational risk, business continuity, fraud risk, or risk management within financial services, payments, banking, or fintech.
- Experience in payment processing, merchant acquiring, card schemes, and transaction operations is preferred.
- Demonstrated experience in risk assessments, incident management, root cause analysis, and control remediation.
- Practical experience in BCP development, business impact analysis, and continuity testing.
- Experience in fraud monitoring, fraud investigations, and the implementation of fraud prevention controls.
- Familiarity with regulatory and card scheme requirements applicable to payment service providers.

6. Core Competencies

- Strong analytical, problem-solving, and risk assessment capabilities.
- Sound understanding of operational controls and payment-related risks.
- Ability to investigate incidents and identify underlying root causes.
- Strong reporting, documentation, and stakeholder management skills.
- Ability to challenge business stakeholders constructively and drive remediation.
- Solid organisational skills and ability to manage competing priorities.
- Understanding of segregation of duties, approval hierarchies, and control assurance.
- Ability to work under pressure during incidents and business disruptions.
- High standards of integrity, accountability, and professional judgement.

Preferred Certifications

- ISO 22301 – Business Continuity Management.
- ISO 31000 – Risk Management.
- Certified Fraud Examiner (CFE).
- Relevant operational risk or business continuity certifications.

Our values guide how we think and act - They describe what we care about the most.

Customer first - It’s embedded in our design thinking and customer service approach.

Open - Openness allows us to constantly improve and evolve.

Real - No jargon and no excuses!

Bold - Constantly challenging ourselves and our way of thinking.

Resilient – If we fail, we bounce back stronger than before

Collaborative - We know that we can achieve a lot more as a team.

We are changing lives by constantly striving for a better solution. Join us.

📌 Risk Manager (Karnataka)
🏢 geidea
📍 Karnataka