Compliance Manager & MLRO, Malaysia

ABOUT THE ROLE \-------------- HitPay is licensed across five markets and is building out a per-jurisdiction compliance structure. This role owns regulatory compliance and the MLRO function for our Malaysia entity end-to-end - you are HitPay's accountable compliance owner in-market and the BNM-designated Compliance Officer. You'll set local policy, own the regulator relationship with Bank Negara Malaysia (BNM), and be the single escalation point and decision-maker for suspicious transaction reporting. This is a second-line control role: you design and test the controls and own the STR decision - you are deliberately separate from the first-line AML Operations team that runs day-to-day onboarding and alert triage. WHAT YOU'LL OWN \--------------- Regulatory Compliance - Own HitPay Malaysia's AML/CFT/CPF and TFS compliance with BNM requirements, and keep policies and procedures current as regulations and ML/TF/PF typologies evolve. - Act as the reference point for all AML/CFT/CPF matters in the Malaysia entity. - Manage the BNM relationship: regulatory reporting, submissions, examinations, and correspondence. - Run independent control testing and periodic assessments of the AML/CFT/CPF framework's effectiveness - sample reviews, exception-report review, and remediation tracking. - Advise the business on new products, corridors, technology and operational changes, and assess the ML/TF/PF risks they introduce. - Deliver AML/CFT/CPF training across the Malaysia organisation and ensure reporting channels are understood and secure. MLRO - Serve as the single point to whom all staff escalate suspicion; evaluate internal escalations from the AML Ops team. - Make the final determination on, and file, Suspicious Transaction Reports to BNM's Financial Intelligence and Enforcement Department, with proper documentation of every decision - including reasoned decisions NOT to file. - Maintain the independence and authority to escalate directly to senior management and the Board where needed. WHAT YOU'LL BRING (MUST-HAVE) \----------------------------- - Demonstrable AML/CFT/CPF compliance experience in a BNM-regulated environment (payments, money services, e-money, banking, or fintech). - The stature, authority and seniority to influence decisions and stand firm on compliance positions. - "Fit and proper" standing - probity, personal integrity and reputation; competency and capability; financial integrity. - Working knowledge of the AMLA 2001, BNM AML/CFT/CPF & TFS Policy Documents, and current ML/TF/PF typologies. - Sound judgment under ambiguity and a documentation-first habit - your STR rationale must withstand regulator review. - Fluency in English and Bahasa Malaysia. NICE TO HAVE \------------ - Recognised AML/CFT certification or professional qualification - e.g. CAMS, ICA, or the AICB AML certification. - Experience standing up or maturing a compliance function in a scaling fintech. - Familiarity with screening and transaction-monitoring tooling.