Product Manager, Risk and Fraud

================================================================================

ABOUT HITPAY

================================================================================

HitPay is the payments and business operations platform for small and medium

businesses across Southeast Asia and beyond. We process card, e-wallet, bank

transfer, PayNow, QR and card-present payments for tens of thousands of

merchants across Singapore, Malaysia, the Philippines, Hong Kong, Australia and

the United States — through a single onboarding flow, a single dashboard, and a

single API.

Payments is a regulated business. We hold a Major Payment Institution licence

from the Monetary Authority of Singapore and operate under a spread of local

regimes, scheme rules and partner-bank obligations. Today, most of our risk,

fraud and AML capability exists to keep us safe. We believe a meaningful share

of it should also be a product our merchants pay for.

That is the job.

================================================================================

THE ROLE

================================================================================

You will own risk, fraud and compliance as a product line — not as a cost

centre. You are being hired to design, build and ship products that reduce loss,

shorten onboarding, and generate revenue: fraud screening our merchants opt into,

chargeback and dispute tooling they will pay for, underwriting and KYB

capabilities we can sell or embed, monitoring and reporting our larger merchants

and platform partners need in order to grow on us.

This is a builder's role with a regulator's discipline. You will spend your week

between a compliance officer, a backend engineer and a merchant, and you will be

the person who can hold all three conversations without a translator.

================================================================================

WHAT YOU WILL OWN

================================================================================

Revenue products

 - Define, price and ship monetisable risk and fraud products: fraud scoring

  and screening tiers, chargeback protection and representment tooling,

  dispute automation, merchant-facing risk dashboards, KYB / identity

  verification as a paid capability, and risk services for platform and

  marketplace partners.

 - Build the commercial case: attach rate, pricing model, loss economics,

  payback. Own the P&L logic of what you ship, not just the roadmap.

 - Work with Sales and Partnerships to take these products to market — you will

  be in customer calls, and you will lose some of them and learn why.

Compliance and risk engineering

 - Own the product surface of transaction monitoring, sanctions and PEP

  screening, merchant onboarding and KYB, prohibited-industry and MCC policy

  enforcement, and chargeback and fraud loss controls.

 - Turn regulatory obligations and internal policy into shipped system

  behaviour: rules, thresholds, queues, audit trails, evidence packs,

  escalation paths and reporting.

 - Drive rule tuning and alert quality as a product metric. False positive

  rate, analyst minutes per alert and precision at the top of the queue are

  yours to move.

 - Evaluate, integrate and manage third-party vendors — fraud engines,

  screening providers, device intelligence, identity — including build vs.

  buy calls and commercial negotiation support.

Stakeholder leadership

 - Be the trusted counterpart to the Compliance and MLRO function. You will not

  ship around them, and they will not be surprised by what you ship.

 - Handle regulator, partner-bank and scheme-facing product questions:

  respond to information requests, explain control design, and evidence that

  the system does what the policy says it does.

 - Translate between compliance intent and engineering implementation in both

  directions, and say plainly when a control cannot be built the way it was

  written.

================================================================================

WHAT WE ARE LOOKING FOR

================================================================================

Non-negotiable

 - 5+ years in product management, with meaningful time spent on compliance,

  risk or fraud engineering INSIDE a payments company — a PSP, acquirer,

  payment facilitator, card issuer, remittance provider, digital bank,

  marketplace payments team or fraud/RegTech vendor. Adjacent fintech

  experience without payments exposure is not a substitute.

 - Demonstrated ownership of systems that a regulator, auditor or scheme has

  actually examined. You should be able to describe a control you designed and

  how it held up under scrutiny.

 - Working fluency in the regulation, not a reading knowledge: AML/CFT

  obligations and the MAS Payment Services Act notices, or an equivalent

  regime you have operated under (BNM, BSP, AUSTRAC, FinCEN, FCA). CDD/KYB,

  ongoing monitoring, STR/SAR workflow, sanctions screening, record keeping.

 - Card scheme and network risk programmes: Visa VAMP / VDMP, Mastercard

  Excessive Fraud and Chargeback programmes, dispute lifecycle and

  representment, 3-D Secure and SCA, PCI DSS scope.

 - Fluency with data. You can write your own SQL, interrogate a warehouse, size

  a rule's impact before proposing it, and refuse a metric that does not hold

  up.

 - A track record of working with compliance stakeholders as partners — people

  whose job is to say no — and shipping anyway, without cutting corners.

Strong signals

 - You have taken a risk or fraud capability to market as a paid product, not

  just an internal tool.

 - Southeast Asian market experience, particularly Singapore, Malaysia or the

  Philippines, and comfort with the local payment rails.

 - Hands-on with fraud and screening platforms (Forter, Sift, Sardine,

  Ravelin, ComplyAdvantage, Flagright, Unit21 or similar) as an operator, not

  a buyer on a slide.

 - You can prototype. You use AI tooling to move faster and you write enough

  code to be dangerous and useful.

 - Experience with merchant underwriting and portfolio risk at a payment

  facilitator, including reserves, exposure and offboarding decisions.

How you work

 - You go find the root cause. You do not ship a workaround and call it done.

 - You are opinionated and you show your reasoning, and you change your mind

  when the data says so.

 - You write clearly. Specs, policy mappings and post-incident write-ups are

  part of the job, not an overhead.

 - You are comfortable being the person accountable when a control fails.

================================================================================

WHAT SUCCESS LOOKS LIKE

================================================================================

First 90 days

 - You know our risk stack end to end: what runs, what is manual, what is

  theatre, and where the real losses are coming from.

 - You have a documented view of our fraud and chargeback loss economics by

  market and by provider, and you have named the top three fixable causes.

 - You have shipped at least one improvement to alert quality or onboarding

  friction that Compliance and Ops can feel.

First 12 months

 - At least one risk or fraud product is live, priced, and generating revenue

  with a defensible attach rate.

 - Fraud and chargeback loss as a share of processed volume is down, and you

  can attribute the movement.

 - Compliance review and onboarding turnaround times are materially shorter

  without a loosening of standards.

 - Our monitoring and screening coverage stands up to a partner-bank or

  regulator review without a scramble.

================================================================================

WHY THIS ROLE

================================================================================

 - Real ownership. This is a product line, not a backlog. You will set the

  strategy and be accountable for the outcome.

 - Small team, direct access. You will work with the founders. Decisions take

  days, not quarters.

 - The problems are genuine. Multi-market regulation, live fraud, real money,

  real merchants — and a product surface that almost nobody in this region has

•   built properly yet.