SM, Enterprise Compliance

The Senior Manager, Enterprise Compliance & Integrity is responsible for strengthening the organisation’s regulatory compliance framework, ensuring adherence to applicable laws, regulations, and internationally recognised standards, including the Principles for Financial Market Infrastructures (PFMI) and oversees the implementation of scam risk management framework for the organisation. This role is also responsible to implement the integrity & governance four core functions namely governance, integrity strengthening, detection & verification, and complaint management effectively.

The role encompasses regulatory advisory, compliance monitoring, policy governance, regulatory engagement, scam management oversight, ensuring a robust, proactive, and forward-looking integrity and compliance posture. The incumbent works closely with internal & external stakeholders and regulators to effectively manage regulatory and integrity risks, including emerging scam threats, while safeguarding market integrity and maintaining public confidence.

1. Enterprise Compliance & Advisory

• Assist to prepare and provide strategic advisory to business units and management on regulatory requirements, implications, and emerging compliance risks.
• Interpret and operationalise applicable laws, regulations, and guidelines (among others CMSA, SC guidelines, BNM rules where applicable) and ensure the legislation compliance register are up-to-date, applicable/relevant for enterprise wide.
• Support new products, initiatives, and business changes by embedding compliance considerations or insights
• Promote consistent application of regulatory requirements and internal compliance standards.
• Responsible to execute and ensure timely execution of mandatory reporting to the respective regulators and stakeholders.
• Prepare monthly compliance report for presentation at the relevant Committees.

2. PFMI & FMI Compliance Oversight

• Assist in the oversight of compliance with PFMI and other relevant FMI regulatory standards.
• Assist the VP/AVP to coordinate periodic self-assessments, gap analyses, and remediation actions.
• Work with all the relevant stakeholders to ensure effective implementation of FMI-related controls.
• Assist to monitor global regulatory developments impacting FMIs and drive necessary enhancements.

3. Compliance Monitoring

• Implement a risk-based compliance monitoring programme.
• Perform thematic reviews, control testing, and compliance assessments.
• Identify control gaps and ensure timely remediation tracking and closure.
• Report key findings, trends, and risk exposures to senior management and committees.

4. Policy Governance & Regulatory Framework

• Maintain relevant policies, procedures, and guidelines for the department.
• Assist to ensure policies are effectively communicated, implemented, and adhered to across the organisation.
• Assist to enhance frameworks based on regulatory updates, audit findings, and industry best practices.

5. Regulatory Engagement & Reporting

• Coordinate responses to regulatory queries and findings.
• Track and disseminate regulatory developments to relevant stakeholders.

6. Scam Management Oversight

• Assist to monitor and oversee the organisation’s scam management framework to ensure compliance with regulatory and industry expectations.
• Assist in the implementation of scam prevention, detection, reporting, and response protocols.
• Ensure effective coordination and escalation of scam incidents via established channels (e.g., Bursa Assist Portal).
• Monitor scam trends, typologies, and emerging threats, and advise management on control enhancements.
• Assist the VP/AVP in collaborating with the Scam Management team to strengthen incident response and mitigation measures.
• Work together with the relevant divisions/departments to drive organisation-wide awareness initiatives to strengthen scam vigilance and preparedness.
• Assist the VP/AVP to provide updates on scam management to the Management Risk & Audit Committee (MRAC) and RMC on a quarterly basis.

7. Integrity & Governance Unit (IGU)

• Implement four (4) core functions of Integrity & Governance Unit (IGU) namely Governance, Integrity Strengthening, Detection & Verification, and Complaint Management effectively without influence from any internal or external parties.
• Implement Organisation Anti-Corruption Plan (OACP), enterprise wide.
• Attend complaints received on integrity & compliance issues (such as violation on code of conduct/ethics), and carry out necessary actions against any misconduct involving integrity and compliance.
• Carry out detection and verification over complaints or suspicions over integrity and compliance disclosures.
• Maintain complaints management system and ensure effective implementation of Whistleblower Policy & Procedures.
• Organise and facilitate awareness workshops and briefing sessions on integrity and governance practices on regular basis.

8. Stakeholder Management & Others

• Collaborate closely with all the relevant stakeholders among others Risk colleagues, Legal, Operations, Technology, Cybersecurity, Business Units, etc.
• Support the VP/AVP in reporting to the Senior Management, Board Committees, and Regulators.
• Foster a strong compliance and ethical culture across the organisation.
• Undertake any other responsibilities as assigned by the Unit Head, Head of Department, or Director of GRC from time to time.