Key Responsibilities:.

- Vision & roadmap: Define and communicate the product vision and roadmap for our risk modules, aligned to regulatory expectations.

- Risk management principles (ISO 31000): Articulate purpose, risk criteria, appetite/tolerances, and governance; design audit-ready processes.

- Risk problem framing: Use research, data, and risk insights to translate operational/model/climate (ESG) risk disciplines into clear, detailed requirements.

- Controls & effectiveness (CER): Map real-world controls to a Control Effectiveness Rating; design testing/attestation so evidence updates CER over time.

- Scoring logic: Define and maintain thresholds, banding, and decision rules for Inherent Risk - Residual Risk.

- Model design & calibration: Apply best-practice risk-model methodologies; define features, weights, and normalisation; run back-tests and sensitivity analysis; set cutoffs; monitor drift; document assumptions and data lineage.

- System design (risk): Understand and design features for RCSA, KRI/KCI thresholding, loss-event capture, issues/actions, control attestations, risk appetite & limits, and portfolio risk views.

- Regulatory & governance alignment: Ensure designs support ISO 31000, BCBS 239 (risk data aggregation/reporting), the three lines of defence, audit trails, segregation of duties, SOX-style controls, and privacy/security guardrails (e. , ISO 27001/27701, PDPA/GDPR).

- Decisioning & model governance: Partner with risk SMEs and data teams to shape scoring/rules engines; ensure explainability, data lineage/metadata, and model governance (e. , SR 11-7).

- Cross-functional delivery: Work with risk experts, engineering, design, and operations to ship high-quality solutions on time; keep scope crisp and outcomes measurable.

- Backlog & PRDs: Prioritise the backlog; write clear PRDs and user stories; manage requirements with Product Owners and engineering.

- Customer journeys & UX: Be the voice of the risk user-risk managers, first-line operators, auditors-ensuring fast triage, transparent rationale, and clean evidence.

- Stakeholder communications: Proactively communicate progress, risks, and tradeoffs across UK / Singapore / India time zones with concise, data-driven updates.

- Agile leadership: Support Agile ceremonies (PI/iteration planning, stand-ups, reviews); balance strategic thinking with hands-on prototyping, validation, and delivery.

Preferred Qualifications and Experience:

Required Skills & Qualifications:

- 7-10+ years in Product Management or Business Analysis building risk / GRC / financialservices products.

- Industry experience in risk assessment (financial services, commodities, insurance).

- Proven ownership across the full product lifecycle (strategy - discovery - delivery - launch - iterate).

- Deep familiarity with risk-management concepts, including operational risk (RCSA, KRI/KCI, loss events, issues/actions, risk appetite).

- Experience aligning products to frameworks such as ISO 31000, BCBS 239, the three lines of defence, COSO, and data/privacy/security standards (ISO 27001/27701, PDPA/GDPR).

- Strong Agile delivery (Scrum/Kanban/SAFe) and backlog management; outcome-driven prioritisation.

- Ability to turn complex risk requirements into simple, testable stories and flows.

- Excellent stakeholder management across risk, compliance, and engineering.