RiskManager

_Job Description_ **Role Summary** The LOD 1 Risk Manager serves as a key pillar within the First Line of Defense (LOD 1) for AirAsia MOVE, ensuring that all business operations, processes, and products adhere to internal policies, regulatory requirements, and industry standards. This role is responsible for the day-to-minute implementation and oversight of compliance controls, the proactive management of operational risks, and the direct support of critical certification programs like PCI DSS. The manager acts as the primary governance link between business execution and enterprise control functions. **Key Responsibilities** **First Line of Defense (LOD 1) Governance** * **Policy Implementation:** Translate enterprise-wide governance and security policies into actionable, day-to-day controls and procedures for AirAsia MOVE business units (e.g., booking, payments, mobile app functions). * **Process Assurance:** Perform internal compliance checks and self-assessments to ensure controls are operating effectively before escalation to LOD 2 functions (Risk, Compliance). * **Risk Monitoring:** Proactively identify, assess, and monitor operational risks, maintaining a local risk register focused on LOD 1 activities and controls. * **Control Design:** Collaborate with product and engineering teams to embed security, compliance, and risk controls directly into new products and feature rollouts (Shift-Left approach). **PCI DSS Certification Support** * **Program Management:** Act as the internal coordinator for all activities related to maintaining and achieving PCI DSS compliance for AirAsia MOVE’s cardholder data environment (CDE). * **Evidence Collection:** Manage the timely collection and review of evidence required for annual PCI DSS audits and quarterly self-assessment questionnaires (SAQs). * **Control Validation:** Oversee the validation and testing of PCI DSS security controls, coordinating with IT and Security Operations teams for remediation of gaps. **Business Re