• Vision & roadmap: Define and communicate the product vision and roadmap for our risk modules, aligned to regulatory expectations.

• Risk management principles (ISO 31000): Articulate purpose, risk criteria, appetite/tolerances, and governance; design audit-ready processes.

• Risk problem framing: Use research, data, and risk insights to translate operational/model/climate (ESG) risk disciplines into clear, detailed requirements.

• Controls & effectiveness (CER): Map real-world controls to a Control Effectiveness Rating; design testing/attestation so evidence updates CER over time.

• Scoring logic: Define and maintain thresholds, banding, and decision rules for Inherent Risk → Residual Risk.

• Model design & calibration: Apply best-practice risk-model methodologies; define features, weights, and normalisation; run back-tests and sensitivity analysis; set cut- offs; monitor drift; document assumptions and data lineage.

• System design (risk): Understand and design features for RCSA, KRI/KCI thresholding, loss-event capture, issues/actions, control attestations, risk

appetite & limits, and portfolio risk views.

• Regulatory & governance alignment: Ensure designs support ISO 31000, BCBS 239 (risk data aggregation/reporting), the three lines of defence, audit trails, segregation of duties, SOX-style controls, and privacy/security guardrails (e.g., ISO 27001/27701,

PDPA/GDPR).

• Decisioning & model governance: Partner with risk SMEs and data teams to shape scoring/rules engines; ensure explainability, data lineage/metadata, and model governance (e.g., SR 11-7).

• Cross-functional delivery: Work with risk experts, engineering, design, and operations to ship high-quality solutions on time; keep scope crisp and outcomes measurable.

• Backlog & PRDs: Prioritise the backlog; write clear PRDs and user stories; manage requirements with Product Owners and engineering.

• Customer journeys & UX: Be the voice of the risk user—risk managers, first-line operators, auditors—ensuring fast triage, transparent rationale, and clean evidence.

• Stakeholder communications: Proactively communicate progress, risks, and trade- offs across UK / Singapore / India time zones with concise, data-driven updates.

• Agile leadership: Support Agile ceremonies (PI/iteration planning, stand-ups, reviews); balance strategic thinking with hands-on prototyping, validation, and delivery.