This role exists to own MoMo's end-to-end merchant risk framework and turn it from a manual, people-powered control layer into a data- and model-driven one - without loosening control.
The Senior Lead is accountable for closing that gap: designing the policy and escalation architecture, directing (not merely requesting) the AI scoring models together with Product, Engineering, Data and Tech, running the feedback loop that keeps those models honest, and leading a -36-person QC organisation across back-office and field to execute it consistently at scale.
JOB RESPONSIBILITIES
Own the E2E merchant risk framework
Own the merchant risk management framework end-to-end - KYB/KYC/AML, fraud and quasi-merchant detection, ongoing monitoring, and the feedback loop that connects QC findings back to policy and model.
Set and maintain risk rules, thresholds and merchant risk tiers; define what gets auto-approved, what goes to Watch, and what must reach a human - and own the consequences of where those lines are drawn.
Build the policy and escalation architecture: decision rights, escalation paths by severity, SLA per tier, and the audit trail that evidences control effectiveness to Compliance, Legal and regulators.
Own risk outcomes, not just process compliance: risk control kept under x% while merchant base and manual-review reduction both scale.
2. Lead the QC organisation (Back-office & Field) at scale
Lead -36 people across two QC arms: Back-office QC (6) for profile and case review, and Field Operations QC (30) for on-site verification, POSM and merchant-facing checks - through Team Leaders and Supervisors.
Standardise how QC is done: SOPs, sampling logic, decision playbooks, calibration sessions, and a shared QC quality bar so two reviewers reach the same verdict on the same case.
Build the levelling, competency and coaching system that lets the team grow without diluting judgement; develop successors so escalation does not bottleneck on one person.
Manage productivity and quality together - never one at the expense of the other - through KPIs, calibration, and root-cause review of QC misses.
3. Data-driven decision making
Define the metric set for risk QC - risk rate, false positive / false negative, manual-review ratio, QC accuracy, turnaround time, escalation volume - and own the dashboards behind them.
Read and interrogate data directly (SQL/BI): segment risk by merchant type, industry, geography and channel; find where controls over- or under-fire before someone else does.
Translate analysis into decisions: rule changes, threshold moves, sampling reallocation, or a case for more automation - each with a stated expected impact and a follow-up measurement.
Bring evidence, not anecdote, to leadership: quantify residual risk (missed cases, wrongly-flagged cases) and the cost of each control choice.
4. Product thinking, without being a
product ownerThink in systems and flows rather than tickets: understand how a rule change ripples into onboarding conversion, field workload, merchant experience and complaint volume.
Write clear problem statements and requirements for internal tooling (QC workbench, case queue, escalation workflow, dashboards) and prioritise them against risk impact.
Balance automation against judgement: decide deliberately where a human must stay in the loop, and defend that boundary with data.
5. Stakeholder management & risk culture
Partner with Cell team (Product, AI, Risk) and Cross team (Legal, Tech ...) so controls are embedded in the flow instead of bolted on afterwards.
Represent risk in leadership forums: report control health, escalate systemic exposure early, and make trade-offs explicit rather than absorbing them silently.
Raise the organisation's risk literacy - typology briefings, case reviews, post-incident learning - so risk thinking is shared, not centralised in one team.
JOB REQUIREMENT
Knowledge / Skills
Risk domain depth: strong command of AML / KYB / KYC and fraud typologies - beneficial ownership, shell and quasi-merchant patterns, cash-intensive and high-risk industries, transaction-behaviour red flags - at a level that lets you challenge a model, not just consume it.
Systems thinking: see the merchant lifecycle as one connected system; anticipate second-order effects of a policy or threshold change on onboarding, field workload and merchant experience.
Data & analytical skill: read dashboards critically and query data directly (SQL / BI); comfortable with sampling, error-rate analysis and sizing residual risk; decisions default to evidence.
QC operations at scale: design sampling methodology, calibration, SOPs and quality bars for a large review workforce spanning back-office and field.
Product sense (not product ownership): frame problems, write requirements and set acceptance criteria for internal risk tooling; prioritise by risk impact.
Coaching & stakeholder management: develop leaders beneath you, and align Tech, Compliance, Product and business stakeholders when risk and growth pull in different directions.
Working Style & Personality
Judgement under ambiguity: decides with incomplete information, states the assumption, and revisits it when data arrives.
Intellectually honest: distinguishes what is proven from what is hypothesis; says "I don't know yet" and then goes and finds out.
Builder, not gatekeeper: treats control as something to be engineered and improved, not a veto to be exercised.
Calm under pressure: stays grounded during incidents and regulatory scrutiny; escalates early and without drama.
People-first at scale: scales a large team through clarity, calibration and coaching rather than through personal heroics.
Education & Experience
Bachelor's degree in Finance, Banking, Economics, Law, Data or a related field.
3+ years in risk management, compliance, fraud, internal control or QC operations -
Hands-on ownership of KYB/KYC/AML or fraud controls, including rule/threshold design and case adjudication.
Demonstrated data capability: has personally analysed control performance and changed a policy or rule based on that analysis (SQL/BI proficiency expected).