CTOS Digital is a key player in the ASEAN credit reporting landscape, enabling digital credit solutions through strategic investment and innovation. We empower individuals and businesses with the confidence to make sound credit decisions through access to data and insights with greater ease and speed.

ROLE OVERVIEW

This role is responsible for supporting the Company's regulatory compliance activities and ensuring adherence to applicable regulatory requirements, industry standards, and internal policies and procedures within a regulated financial data and credit reporting environment.

The role supports the Assistant Manager, Business Compliance in coordinating compliance-related activities, regulatory reporting, licensing and certification requirements, audit exercises, compliance monitoring, and regulatory submissions. The Executive assists in ensuring compliance with the Credit Reporting Agencies Act 2010, Bank Negara Malaysia requirements, ISO27001 standards, and other applicable regulatory obligations and industry guidelines.

KEY RESPONSIBILITIES

1. Regulatory Compliance, Audit & Certification Management

· Coordinate and support regulatory compliance, licensing, certification, and audit activities, including requirements under the Credit Reporting Agencies Act 2010 (CRAA 2010), Bank Negara Malaysia (BNM), ISO 27001, and other applicable regulations.

· Support the administration of CRA and ISO 27001 licensing and certification requirements, including minutes of meetings, presentation deck, regulatory obligations,submissions, reporting, and correspondence.

· Coordinate regulatory audits, inspections, internal and surveillance audits, certification assessments, recertification exercises, and other independent reviews, including audit opening and closing meetings with relevant stakeholders.

· Prepare and coordinate management responses, information requests, supporting evidence, and documentation required for audits, examinations, inspections, compliance reviews, and certification assessments.

· Track audit findings, observations, recommendations, non-conformities, corrective action plans, and management action plans to support timely remediation and closure.

· Conduct gap assessments arising from new or revised regulatory, certification, and industry requirements, and support the implementation of corrective actions.

· Track audit records, evidence repositories, trackers, and audit registers to support audit readiness and regulatory compliance.

· Support engagements with regulators, auditors, certification bodies, and relevant stakeholders, including governance forums, committee meetings, audit discussions, and compliance review sessions. Assist to track, check and challenge the rectification actions for Thematic Audits & Assurance Review

2. Policy & SOP Governance

· Draft policies, procedures, and standard operating procedures arising from regulatory, audit, certification, or business requirements & support the reviews for Business Units

· Update the centralised register of policies, procedures, and SOPs for Compliance Section

· Assist in identifying the control gaps and improvement opportunities within policies and SOPs and work with process owners to implement enhancements.

· Ensure proper document governance, version control, approval, and publication processes are adhered to.

3. Regulatory Inventory & Records Management

· Update regulatory inventory listings covering incoming and outgoing communications, submissions, approvals, licences, commitments, and regulatory correspondence.

· Maintain and update compliance calendars, regulatory affairs registers, ISMS document masterlists, compliance document masterlists, and regulatory audit trackers to support effective compliance monitoring and timely fulfilment of obligations.

· Update audit, certification, and regulatory registers, including action trackers and evidence repositories.

· Track regulatory deadlines and ensure timely submission of required reports and information.

4. Regulatory Reporting & Stakeholder Engagement

· Prepare and consolidate regulatory updates, audit progress reports, governance dashboards and management papers.

· Support the preparation of materials, presentations, reports, and supporting data for the Risk Management Committee (RMC), Risk & Compliance Committee (RCC), Board Risk Committee (BRC), Board of Directors, and other governance forums.

· Coordinate regulatory reporting and submissions, including credit report delivery statistics, annual regulatory submissions, BNM CCRIS access reporting, licence- and certification-related reporting, and other regulatory returns.

· Update the reporting trackers, submission schedules, governance records, and supporting documentation to ensure reporting obligations are fulfilled accurately and within established timelines.

· Consolidate and track updates relating to regulatory submissions, audit findings, compliance monitoring activities, regulatory developments, action plans, and remediation efforts for management reporting and follow-up.

· Support governance processes relating to Board attestations, regulatory declarations, certifications, management confirmations, and compliance-related submissions.

· Coordinate cross-functional engagements and follow-up activities with business units arising from regulatory, audit, compliance, and governance matters.

· Coordinate the administration of management and governance committee meetings, including meeting documentation, action tracking, reporting deliverables, and stakeholder follow-up.

5. Change Management Initiatives & Training

· Provide day-to-day compliance support and guidance to business units on regulatory and governance matters.

· Assist in the development and delivery of compliance training, awareness initiatives, newsletters, and guidance materials.

· Promote a culture of compliance and good governance across the organisation.

6. Ad hoc Assignment

· Undertake ad hoc assignments, projects, regulatory exercises, and other responsibilities as assigned by the Manager, HoD, GCCRO and Management from time to time.

Qualifications

· Bachelor's Degree in Law, Compliance, Risk Management, Business Administration, Finance, Accounting, Economics, or related disciplines.

· Professional certifications in Compliance, Risk Management, Governance, Audit or Information Security would be an added advantages

Work Experiences

· Minimum 1-3 years of relevant working experience in Compliance, Governance, Risk Management, Internal Audit, Information Security, Legal, or related functions.

· Experience in managing regulatory submissions, correspondence, audits, inspections, or interactions with regulators and external auditors.

· Experience in policy and procedure governance, regulatory reporting, compliance monitoring, or audit coordination.

· Exposure to regulated industries such as financial services, fintech, credit reporting, banking, insurance, or technology-related environments would be an added advantage.

· Experience supporting ISO 27001 certification, regulatory audits, or compliance assessments would be advantageous.

Skills & Competencies

· Strong communication and stakeholder management skills with the ability to work across multiple business units.

· Strong analytical thinking, attention to detail, and ability to interpret regulatory requirements.

· Experience in regulatory reporting, audit coordination, and compliance monitoring is an advantage.

· Experience in policy and SOP development, review, and governance.

· Good management reporting, presentation, and documentation skills.

· Ability to manage multiple priorities and work independently in a fast-paced environment.

· High integrity, professionalism, and strong governance and risk awareness.

· Proactive, organised, and capable of supporting compliance and change management initiatives.