Responsibilities

1. Operational Risk Framework & Implementation

• Develop, maintain, and implement operational risk policies, assessment methodologies, and governance processes tailored to 9Pay’s business model.
• Propose risk appetite statements, tolerance thresholds, and escalation procedures for approval by the appropriate governance authority.
• Lead the implementation of core operational risk tools, including Risk and Control Self-Assessments (RCSA), Key Risk Indicators (KRI), operational loss data collection, and risk event management.
• Guide business and functional teams in identifying risks, assigning control ownership, and developing risk treatment plans; monitor implementation and control effectiveness.

2.Product, Process & Third-Party Risk Assessment

• Lead operational risk assessments for new or materially changed products, services, features, business processes, and commercial initiatives.
• Assess risks throughout the payment lifecycle, including merchant and partner onboarding, due diligence, transaction processing, collection and disbursement, reconciliation, settlement, refunds, and dispute resolution.
• Coordinate risk assessments of banking partners, payment partners, service providers, and other third parties; recommend appropriate controls and mitigation measures.
• Work with Business, Product, Operations, Finance, Legal, and Technology to embed controls into product and process design and track the implementation of risk recommendations.

3.Fraud & Transaction Risk Management

• Lead the development and ongoing enhancement of fraud risk policies covering customers, merchants, partners, and payment transactions.
• Work with relevant teams to establish risk-based monitoring rules, alert thresholds, and transaction limits; periodically review their effectiveness and recommend adjustments.
• Oversee the analysis of suspicious transactions, emerging fraud patterns, complaints, and disputes to strengthen fraud prevention, detection, and response.
• Coordinate fraud investigations and case resolution with relevant teams, supporting timely containment and loss mitigation within delegated authority.

4.Risk Event Management & Remediation

• Establish and oversee processes for recording, classifying, and assessing operational risk events, losses, and near misses across business and operational activities.
• Coordinate root cause analysis and impact assessments for incidents involving transactions, processes, systems, data, and service delivery.
• Track corrective and preventive action plans, assess remediation effectiveness, and escalate overdue actions or risk exposures exceeding approved tolerances.
• Work with Technology, Information Security, and Operations to assess service disruption risks, business continuity capabilities, and related response arrangements.

5.Risk Monitoring, Reporting & Advisory

• Develop risk reports and dashboards covering KRIs, operational risk events, losses, fraud trends, and the status of material remediation actions.
• Analyze risk data to identify emerging risks, unusual patterns, and systemic control weaknesses.
• Provide regular and ad hoc reporting to senior management, supported by clear recommendations and timely escalation of material risks.
• Coordinate with Legal, Compliance, and relevant subject matter experts to address risk management requirements from regulators, banking partners, and payment partners.

6.Team Leadership & Risk Culture

• Lead the Risk & Fraud team, including work allocation, technical guidance, coaching, and capability development.
• Take a hands-on role in complex risk matters, material assessments, and the improvement of risk management tools and practices.
• Develop and deliver training and awareness initiatives to strengthen risk ownership and accountability across the organization.
• Promote the use of data analytics and automation to improve risk monitoring, early warning capabilities, and reporting efficiency.

QUALIFICATIONS & EXPERIENCE

Education & Professional Experience

• Bachelor’s degree in Finance, Banking, Economics, Business Administration, Information Systems, or a related discipline.
• At least 5 years of risk management experience, with practical experience in operational risk management and/or fraud risk management within a fintech company, payment service provider, bank, or financial institution.
• At least 2 years of experience leading a team or leading the implementation of risk management programs.
• Experience with e-wallets, payment gateways, collection and disbursement services, card payments, or cross-border remittances is preferred.

Technical Knowledge & Expertise

• Hands-on experience developing or implementing RCSA, KRIs, risk event management, operational loss data collection, and remediation tracking.
• Sound understanding of payment transaction flows, operational processes, and risks associated with merchants, partners, reconciliation, settlement, refunds, and disputes.
• Ability to assess risks arising from products, processes, and system changes, identify control weaknesses, and recommend practical mitigation measures.
• Understanding of digital payment fraud typologies, KYC/KYB principles, and transaction monitoring approaches.
• Working knowledge of applicable laws and State Bank of Vietnam regulations relevant to payment services and the role’s risk management responsibilities.
• Sufficient understanding of technology risk, information security, and business continuity to work effectively with Technology and Information Security teams. Familiarity with ISO/IEC 27001 and PCI DSS is an advantage.

Skills & Attributes

• Strong analytical and root cause analysis skills, with the ability to translate findings into clear, evidence-based recommendations.
• Proficiency in Excel; experience with SQL, business intelligence tools, or dashboard development is an advantage.
• Strong team leadership, stakeholder management, and cross-functional coordination skills, with the ability to drive remediation plans through to completion.
• High integrity, a proactive approach, and sound professional judgment, with the ability to balance risk exposure and business objectives.
• Professional proficiency in English, including the ability to review technical documentation, prepare reports, and communicate with partners.

BENEFITS

Attractive Compensation & Benefits for Senior Management

• Competitive salary: Attractive, negotiable compensation aligned with leadership responsibilities and capabilities.
• Performance-based bonuses: Regular bonus schemes based on business outcomes and actual contributions.
• Year-end bonus: Transparent and fair bonus structure recognizing year-round efforts and achievements.
• Dynamic work environment: Open, youthful, and agile culture – emphasizing innovation and practical efficiency.

Comprehensive Benefits

• Free, high-quality lunch served daily at the office.
• Full statutory insurance coverage: Social, health, and unemployment insurance.
• Annual health check-ups at reputable medical facilities.
• Exclusive premium health insurance tailored for management-level staff.
• Modern working tools and facilities: Full support with modern equipment and a professional, flexible working space.

Growth & Team Engagement

• A dynamic, open, and professional work culture where creativity, initiative, and innovation are highly encouraged.
• Ongoing professional growth opportunities through internal training, leadership mentoring, and learning support.
• Transparent performance reviews & feedback to help you stay aligned and grow purposefully.
• Frequent engagement activities such as company trips, team-buildings, learning workshops, and festive celebrations.
  

Office location:Tay Ha Building, 19 To Huu Street, Thanh Xuan Ward, Hanoi

Working hours: Monday to Friday (09:00 – 18:00); 2–3 Saturday mornings on an alternating basis (remote work).