Job Description
As a key member of the Compliance Function you will provide strategic compliance advisory and assist with SingPost's regulatory compliance framework and data privacy governance.
Regulatory Compliance & Monetary Authority of Singapore (MAS) Payment Services Act Major Payment Institution License Management
- Framework & Controls: Implement, maintain, and robustly enforce compliance control
frameworks across all functions.
- AML/CFT & Sanctions Oversight: Manage the end-to-end Financial Crime compliance
program, including anti-money laundering (AML), countering the financing of terrorism
(CFT), and Sanctions screening/compliance regimes in accordance with MAS
Notices (e.g., PSN01/PSN02).
- Anti-Bribery & Corruption (ABC): Oversee, review, and enhance the organisation's
Anti-Bribery and Corruption framework to ensure strict adherence to the Prevention
of Corruption Act and relevant corporate governance standards.
- Internal reviews & Reporting: Participate in compliance reviews, regulatory
investigations, and prepare comprehensive management reports and regulatory inputs
for the Head of Compliance.
- Transaction Monitoring & Oversight: Oversee the daily review of transaction
monitoring alerts and reports. Ensure immediate identification, analysis, and flagging of
anomalous or suspicious transaction patterns.
- Investigations & Reporting: Assist the Head of Compliance on investigations into
compliance matters, manage the Suspicious Transaction Reporting (STR) process,
and prepare comprehensive management reports and regulatory inputs for the Head of
Compliance.
Data Privacy Governance
- DPTM Project Team: Assist the Head of Compliance to drive, manage, and oversee the
end-to-end IMDA Data Protection Trustmark (DPTM) certification process to ensure
SingPost successfully achieves and maintains.
- Privacy Management: Manage data privacy framework, ensuring full alignment with the
Singapore Personal Data Protection Act (PDPA) and relevant data protection best
practices.
- Risk Mitigation: Propose, design, and implement effective compliance and privacy
controls to proactively close any identified gaps.
Business Advisory & Projects
- Early-Stage Advisory: Partner with various functions on new projects and product
launches to ensure regulatory requirements, financial crime risks, and privacy obligations
are addressed at the earliest stage.
- Internal Consultation: Provide day-to-day internal compliance and regulatory advisory
to internally to Management, business teams and other internal stakeholders, and
management.
- AI: Use of AI to automate processes and/or increase efficiency in day-to-day tasks
Compliance Culture & Training
- E-Learning Content & Delivery: Partner with HR/L&D to design, develop, and deploy
comprehensive, interactive compliance e-learning materials and modules (e.g.,
covering AML, Sanctions, ABC, and Data Privacy). Track completion rates and test
effectiveness across the organization.
- Awareness Campaigns: Conduct targeted live training and regulatory awareness
briefings alongside the digital curriculum. Cultivate a proactive compliance culture by
drafting and circulating internal compliance newsletters.
- Capability Building: Provide mentorship where necessary and technical guidance to
team members and internal stakeholders.
Requirements
- Bachelor's Degree in Law, Business, Finance, Risk Management, or a
- 5 years of progressive experience in regulatory compliance and data privacy, ideally within Fintech, Logistics-Tech, or Financial Institutions in Singapore.
- Regulatory & Technical Expertise:
i) MAS Payment Services Act (PSA): Mandatory practical experience managing compliance framework for a Major Payment Institution (MPI) licensee. This includes a deep operational understanding of MAS Notices (such as PSN01/PSN02), transaction
monitoring, and safeguarding requirements.
ii) Financial Crime Framework: Strong expertise in managing corporate governance, Anti-Bribery & Corruption (ABC) policies (Prevention of Corruption Act), and Sanctions screening/compliance regimes.
III) Data Privacy & DPTM: Robust knowledge of the Personal Data Protection Act (PDPA).
