About the job FinCrime Lead (Regional Retail Payments)
About the role:
We are seeking a highly strategic and operational FinCrime Lead to join our Risk Management team, focusing specifically on our rapidly expanding portfolio of retail and payment products, including BukuPay (Soundbox & QRIS). The successful candidate will be instrumental in bridging strict banking compliance with agile fintech operations to protect our ecosystem. This role is a critical function in acting as our Second Line of Defense (L2), overseeing Suspicious Activity Reporting (SAR/STR), and architecting the risk and compliance workstream for our existing Indonesia and upcoming Philippines expansion.
Key Responsibilities
1. Payment Risk Strategy & L2 Oversight
Payment Risk Management (QRIS & Soundbox): Develop and implement detection strategies for QRIS-specific fraud, including Transaction Laundering, Soundbox cash-out schemes, and merchant-consumer collusion.
L2 Compliance & SAR/STR Filing: Act as the final reviewer and auditor for high-risk escalations from the Merchant Verification Team (MVT). Own the Suspicious Activity Report (SAR) and Suspicious Transaction Report (STR) filing processes for Indonesia (PPATK) and eventually the Philippines (AMLC).
Retail Fraud Strategy: Partner with Risk Data Analytics to build, monitor, and tune detection models for retail-specific risks such as account takeovers (ATO) and promotion abuse, ensuring seamless integration with our Google Sheets-based Fraud Detection System (FDS) for Monday morning monitoring.
2. Regional Expansion & Regulatory Alignment
Philippines (BSP) Readiness: Lead the risk workstream for the PH market expansion, ensuring local product features meet Bangko Sentral ng Pilipinas (BSP) standards and preparing the framework for local reporting and tiered KYC for Sari-Sari stores.
Regulatory Liaison: Act as the subject matter expert for AML-CFT inquiries, maintaining the "Banking Standard" of documentation and audit trails required by our partner banks and regulators (BI/OJK) to ensure BukuPay remains a trusted platform.
3. Process Improvement & MVT Empowerment
Workflow Optimization: Provide functional leadership to the MVT (L1) squad, refining standard operating procedures (SOPs) to reduce false positives and improve the speed of merchant onboarding without compromising security.
Hardware Integrity Monitoring: Collaborate with operations teams to monitor the lifecycle of Soundbox devices, detecting physical anomalies or transaction velocity spikes that suggest hardware misuse for illicit financial flows.
What We Look For
Experience
Must-Have Qualifications
Minimum 7+ years of experience in Financial Crime, AML, or Risk Management.
Hybrid experience working in Traditional Banking (Acquiring/Payments) and FinTech or Digital Payments environments.
Preferred Qualifications
Experience managing or building a Second Line of Defense (L2) function.
Exposure to multi-jurisdictional regulatory environments.
Technical Skills
Must-Have Qualifications
Proficiency in developing Escalation Workflows, Risk Matrices, and AML–CFT policy documentation.
Preferred Qualifications
Ability to interpret and communicate data insights when working with Risk Analytics teams.
Experience translating fraud typologies into automated monitoring or detection rules.
Domain Knowledge
Must-Have Qualifications
Strong understanding of the QRIS ecosystem in Indonesia, including ASPI standards and MPM/CPM payment models.
Familiarity with fraud typologies related to micro-merchants and payment hardware (e.g., Soundbox).
Expert knowledge of Indonesian AML–CFT regulations.
Preferred Qualifications
Experience with or strong understanding of AML regulations in Indonesia and the Philippines, including AMLC and BSP frameworks (e.g., Circular 706/950).
Soft Skills
Must-Have Qualifications
Excellent stakeholder management skills, with the ability to balance strict regulatory requirements and product growth while enabling frictionless compliance.
Preferred Qualifications
Strong project management capabilities, particularly in leading cross-border regulatory readiness projects.
Ability to independently prepare and present quarterly regulatory or risk outlooks to the management team.