Compliance Manager & MLRO, Malaysia

ABOUT THE ROLE \-------------- HitPay is licensed across five markets and is building out a per-jurisdiction compliance structure. This role owns regulatory compliance and the MLRO function for our Malaysia entity end-to-end - you are HitPay's accountable compliance owner in-market and the BNM-designated Compliance Officer. You'll set local policy, own the regulator relationship with Bank Negara Malaysia (BNM), and be the single escalation point and decision-maker for suspicious transaction reporting. This is a second-line control role: you design and test the controls and own the STR decision - you are deliberately separate from the first-line AML Operations team that runs day-to-day onboarding and alert triage. WHAT YOU'LL OWN \--------------- Regulatory Compliance Own HitPay Malaysia's AML/CFT/CPF and TFS compliance with BNM requirements, and keep policies and procedures current as regulations and ML/TF/PF typologies evolve. Act as the reference point for all AML/CFT/CPF matters in the Malaysia entity. Manage the BNM relationship: regulatory reporting, submissions, examinations, and correspondence. Run independent control testing and periodic assessments of the AML/CFT/CPF framework's effectiveness - sample reviews, exception-report review, and remediation tracking. Advise the business on new products, corridors, technology and operational changes, and assess the ML/TF/PF risks they introduce. Deliver AML/CFT/CPF training across the Malaysia organisation and ensure reporting channels are understood and secure. MLRO Serve as the single point to whom all staff escalate suspicion; evaluate internal escalations from the AML Ops team. Make the final determination on, and file, Suspicious Transaction Reports to BNM's Financial Intelligence and Enforcement Department, with proper documentation of every decision - including reasoned decisions NOT to file. Maintain the independence and authority to escalate directly to senior management and the Board where needed. WHAT YOU'LL BRING (MUST-HAVE) \----------------------------- Demonstrable AML/CFT/CPF compliance experience in a BNM-regulated environment (payments, money services, e-money, banking, or fintech). The stature, authority and seniority to influence decisions and stand firm on compliance positions. "Fit and proper" standing - probity, personal integrity and reputation; competency and capability; financial integrity. Working knowledge of the AMLA 2001, BNM AML/CFT/CPF & TFS Policy Documents, and current ML/TF/PF typologies. Sound judgment under ambiguity and a documentation-first habit - your STR rationale must withstand regulator review. Fluency in English and Bahasa Malaysia. NICE TO HAVE \------------ Recognised AML/CFT certification or professional qualification - e.g. CAMS, ICA, or the AICB AML certification. Experience standing up or maturing a compliance function in a scaling fintech. Familiarity with screening and transaction-monitoring tooling.