Lead Wholesale Risk

Job Description: Compliance & Risk Programs Manager

Location: Bangalore, India | Experience: 5–9 years

1. About the Company

Credit Saison Company Limited (Credit Saison Japan) was founded in 1951 and is one of Japan’s largest lending conglomerates with over 70 years of history and listed on the Tokyo Stock Exchange with over 4,500 employees in Japan. The Company has evolved from a credit-card issuer to a diversified financial services provider across payments, leasing, finance, real estate and entertainment. Outside of Japan, there are over 1,500 employees working across Saison International’s global operations spanning five countries - Singapore, India, Vietnam, Mexico and Brazil. Kisetsu Finance India (Pvt) Ltd is a subsidiary of Credit Saison Japan, with an NBFC license and involved in both retail and wholesale lending.

2. About the Role

This role sits in the risk management team. The candidate will be based out of the Bangalore office, India, reporting to SVP Risk and working closely with the risk team members covering non-financial risk and IT risk as well as in house legal counsels on legal matters and policies.

Group compliance oversight — spanning compliance with all applicable laws and regulations, underpinned by a zero-tolerance culture, including but not limited to AML/CFT and data protection — is being integrated into the risk team's existing enterprise risk management (ERM) framework, with oversight routed through the Risk Management Committee (RMC) rather than a standalone compliance committee. It combines four connected areas of work rather than a single narrow mandate:

• Develop and implement a compliance program – working with senior management and legal counsels in setting minimum requirements and compliance standards for various businesses and prioritizing implementation of various compliance initiatives.
• Compliance oversight support – day-to-day support for compliance oversight across businesses (including AML/CFT and data protection, among other applicable regulatory areas), working with local first-line teams and escalating regulatory judgment calls to the Head of Compliance, senior risk team or legal counsels as required.
• RMC material coordination and standardization – supporting the end-to-end RMC reporting process: building and maintaining a standard template, chasing inputs from all contributing teams (deal review, financial risk, non-financial risk, GBD), consolidating them into a single governance-ready pack, and ensuring materials reach invitees on time.
• Data & IT risk implementation review – supporting information security, data confidentiality, and applicable privacy/data protection regulation (e.g., PDPA) implementation reviews, and helping consolidate findings into incident response guidelines, in partnership with the non-financial risk lead. Over time, this is intended to grow into closer, hands-on review of how data risk controls are actually implemented – for example, checking data classification and tagging coverage, reviewing access control matrices, and testing endpoint controls – independently verifying that what IT/InfoSec has built meets the group's minimum standards, and reporting gaps for remediation. This is a pure second-line check: the role does not build, configure, or specify the technical implementation itself, which remains entirely with IT/InfoSec.

This is a program-management and coordination role, not a final decision-making seat: accountability for regulatory judgment calls and second-line risk opinions remains with the Head of Compliance and the senior risk team. The candidate will, over time, help make RMC reporting and compliance/data risk documentation processes that do not depend on any single individual, with room to grow hands-on technical fluency in reviewing data risk implementation along the way.

3. Key Responsibilities

• Work with senior management to develop a group compliance program which sets minimum standards for businesses.
• Monitor/guide local compliance programs and provide assurance to senior management that they meet minimum group standards and frameworks.
• Support setting the priorities for roll out of various group policies and ensure roll out covers end to end implementation including training, clear roles and responsibilities and full lifecycle of incidents.
• Support day-to-day compliance oversight across businesses — covering all applicable laws and regulations, including AML/CFT and data protection — coordinating with local first-line teams and flagging issues for senior review rather than resolving them independently.
• Co-ordinate the RMC material process: improve and maintain a standardized template, chase and consolidate inputs from all contributing teams, and ensure the RMC pack is circulated to invitees at least one week ahead of each meeting, with all sections populated on time.
• Drive standardization of RMC reporting so outputs are consistent across various businesses, and packaged in a way the RMC can act on.
• Support information security, data confidentiality, and applicable privacy/data protection regulation (e.g., PDPA) implementation reviews, and help consolidate findings into incident response guidelines together with the non-financial risk lead.
• Independently check and test what IT/InfoSec has implemented against defined data risk standards – for example, data classification and tagging coverage, access control matrices, and endpoint controls – and report gaps for remediation; the build and configuration of these controls remains with IT/InfoSec.
• Maintain clear documentation of RMC, compliance, and data & IT risk review processes so they are transparent, auditable, and not dependent on any one individual.
• Escalate regulatory judgment calls, high-stakes findings, and any ambiguity in scope to the Head of Risk and/or Head of Compliance promptly.

4. Qualifications and Skills

• Experience in a compliance, risk, or program-management role at a financial institution, ideally with exposure to a broad regulatory compliance landscape (e.g., AML/CFT, data security/privacy regimes such as PDPA or LGPD, and other applicable regulations) across multiple jurisdictions.
• Demonstrated ability to coordinate multiple stakeholders across entities and geographies to run a recurring reporting or governance cadence (e.g., committee or board reporting processes).
• Comfortable engaging with technical detail when reviewing IT/InfoSec's implementation of data risk controls (e.g., data classification and tagging, access controls, endpoint controls) as a growth area – prior hands-on IT/security engineering experience is not required, but the ability to interpret and test technical controls against policy is important.
• Strong process discipline and attention to detail, with the ability to design and enforce templates and checklists rather than rely on ad hoc formats.
• Excellent communication and stakeholder management skills, including the ability to coordinate senior colleagues without having direct authority over them.
• A business, finance, or related degree; certifications such as CAMS, CISA, or similar compliance/IT risk credentials are a plus but not required.

5. Why Join Us?

• Opportunity to join a fast-growing team within a large and stable company, as part of large group.
• Exposure to compliance, non-financial risk, and data & IT risk all within a single role – including hands-on technical fluency in reviewing how data risk controls are implemented – leading to a well-rounded risk profile.
• Chance to shape the governance process – the compliance program – from the ground up, during a live organizational transition.
• Exposure to global markets and diverse geographies.
• Chance to work on impactful projects that promote financial inclusion.
• Collaborative and innovative work environment.
• Competitive compensation and benefits package.