HEAD OF RISK

<p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;font-family:DarwinSans;">Embark on a career at CARSOME, where our vision is to create the most trusted vehicle ownership ecosystem that is driven by technology and data. Join us in our mission to deliver unparalleled peace of mind to customers throughout their pre-owned vehicle ownership experience. At CARSOME, we are guided by values that prioritize our customers, encourage collaborative problem-solving, strive for continuous improvement, and foster bold yet thoughtful innovation. We’re committed to efficient, humble leadership and taking ownership in our roles, always aiming to positively impact our employees, customers, and community.</span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><br /></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;font-family:DarwinSans;"><b>Your Day-to-Day</b></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;font-family:DarwinSans;">1. Risk Management & Governance</span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Develop, implement and continuously enhance the company’s overall risk management framework, policies and governance structure. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Establish and monitor the company’s Risk Appetite Framework (RAF), risk limits, thresholds and key risk indicators. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Provide independent risk oversight and challenge to business decisions where appropriate. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Prepare regular risk reports and dashboards for Management, Risk Committees and the Board. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Ensure appropriate escalation of material and emerging risks. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><br /></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;font-family:DarwinSans;">2. Credit & Portfolio Risk</span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Lead the development and review of credit risk policies, underwriting standards, approval authorities and credit assessment frameworks. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Establish appropriate credit limits, concentration limits and portfolio risk parameters. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Monitor portfolio quality, including delinquency, NPL/impairment trends, concentration risk, vintage performance and recovery performance. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Review and challenge credit strategies, product propositions and customer segmentation from a risk perspective. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Oversee credit risk analytics, portfolio stress testing and early-warning indicators. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Recommend corrective actions where portfolio performance or risk exposure exceeds approved thresholds. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><br /></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;font-family:DarwinSans;">3. Enterprise & Operational Risk</span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Identify and assess key enterprise and operational risks across the organisation. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Establish appropriate controls, KRIs and risk mitigation plans. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Oversee operational risk assessments, incident reporting and root-cause analysis. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Partner with relevant functions on Business Continuity Management (BCM), crisis management and resilience planning. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Monitor risks arising from third-party vendors, outsourcing, technology and business processes. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><br /></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;font-family:DarwinSans;">4. Risk Analytics & Stress Testing</span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Develop risk models, methodologies and analytical tools to support informed business decisions. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Conduct scenario analysis and stress testing across relevant risk areas. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Provide forward-looking insights on emerging risks and their potential impact on the business. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Leverage data and analytics to improve credit decisioning, portfolio monitoring and risk-adjusted growth. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><br /></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;font-family:DarwinSans;">5. Regulatory & Compliance Risk</span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Ensure the company's risk framework remains aligned with applicable Malaysian regulatory requirements and industry standards. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Work closely with Compliance and Legal to identify and address regulatory and compliance risks. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Ensure timely remediation of regulatory, audit and risk-related findings. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Maintain appropriate documentation and governance records for regulatory and audit purposes. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><br /></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;font-family:DarwinSans;">6. Risk Committee & Board Reporting</span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Act as the key risk advisor to the CEO, Management and Board. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Prepare risk reports, papers and recommendations for relevant management and Board committees. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Provide clear and independent views on material risk exposures and proposed business initiatives. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Escalate significant risk matters promptly and recommend appropriate mitigation strategies. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><br /></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;font-family:DarwinSans;">7. Team Leadership</span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Build and lead a high-performing Risk function with appropriate capabilities across credit, portfolio and enterprise risk. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Set team objectives, performance standards and development plans. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Develop risk talent and foster a strong risk-aware culture across the organisation. </span></span></font></p><p class="MsoNormal" style="text-align:justify;"><font face="Times New Roman, serif"><span style="font-size:14.6667px;"><span style="font-family:DarwinSans;">•</span><span style="font-family:DarwinSans;">Ensure clear segregation of duties and appropriate independence of the Risk function.</span></span></font></p><div style="text-align:justify;"><br /></div>