Director Business Process Controls Security

Job Description: Director Business Process Controls & Security

Location - Epitome Building 5,Tower C, 22nd Floor, DLF Phase 3, Sector 25, DLF Cyber City, Gurgaon

TBO(www.tbo.com)

TBO is a global platform that aims to simplify all buying and selling travel needs of travel partners across the world. The proprietary technology platform aims to simplify the demands of the complex world of global travel by seamlessly connecting the highly distributed travel buyers and travel suppliers at scale.

The TBO journey began in 2006 with a simple goal – to address the evolving needs of travel buyers and suppliers, and what started off as a single product air ticketing company, has today become the leading B2A (Business to Agents) travel portal across the Americas, UK & Europe, Africa, Middle East, India, and Asia Pacific.

Today, TBO’s product range from air, hotels, rail, holiday packages, car rentals, transfers, sightseeing, cruise, and cargo. Apart from these products, our proprietary platform relies heavily on AI/ML to offer unique listings and products, meeting specific requirements put forth by customers, thus increasing conversions.

TBO’s approach has always been technology-first and we continue to invest on new innovations and new offerings to make travel easy and simple. TBO’s travel APIs are serving large travel ecosystems across the world while the modular architecture of the platform enables new travel products while expanding across new geographies.

Why TBO:

• You will influence & contribute to “Building World Largest Technology Led Travel Distribution Network” for a $ 9 Trillion global travel business market.
• We are the emerging leaders in technology led end-to-end travel management, in the B2B space.
• Physical Presence in 47 countries with business in 110 countries.
• We are reputed for our-long lasting trusted relationships. We stand by our eco system of suppliers and buyers to service the end customer.
• An open & informal start-up environment which cares.

What TBO offers to a Life Traveller in You:

• Enhance Your Leadership Acumen. Join the journey to create global scale and ‘World Best’.
• Challenge Yourself to do something path breaking. Be Empowered. The only thing to stop you will be your imagination.
• Post pandemic: travel space is likely to see significant growth. Witness and shape this space. It will be one exciting journey.
• As a fastest growing B2B platform our priority is purpose-building scalable systems.
• Adopting industry leading technologies to support best-in-class business capabilities for high performing and scalable solutions.
• Fast response to the evolving regulatory environment and helping to meet the firm's regulatory commitments by addressing internal and external commitments.

Role Overview

We are looking for an experienced leader to strengthen business process controls, onboarding governance, and risk management across critical business operations. The ideal candidate will have experience in banking, fintech, digital wallets, telecom, payments, or credit-led B2B businesses, with a strong understanding of ground-level onboarding processes, operational controls, and fraud prevention.

The primary focus of this role will be to design, implement, and monitor effective controls across customer, merchant, supplier, and partner onboarding processes, particularly where large field sales or business development teams operate. The individual will identify control gaps, strengthen verification mechanisms, prevent fraudulent or unauthorized activities, and ensure adherence to defined policies and approval processes.

The role will also oversee business process risk management, internal controls, and audit readiness, with application security and technology risk management forming an important but secondary part of the responsibility.

Key Responsibilities

1. Business Process Controls & Governance — Primary Focus

• Design, implement, and strengthen controls across critical business workflows, with particular emphasis on customer, merchant, supplier, and partner onboarding.
• Evaluate existing processes to identify gaps, control failures, potential fraud, unauthorized activities, and financial or operational risks.
• Establish clear control frameworks, standard operating procedures (SOPs), verification protocols, approval hierarchies, and exception-handling mechanisms.
• Implement maker-checker controls, segregation of duties, approval limits, audit trails, and periodic control reviews.
• Establish mechanisms to ensure that business teams follow prescribed processes and that deviations are appropriately documented, approved, and monitored.
• Partner with business operations, sales, business development, finance, and compliance teams to embed effective controls into day-to-day operations.
• Develop control dashboards, key risk indicators (KRIs), and management reports to track control effectiveness, exceptions, and remediation.

2. On-ground Onboarding Controls & Verification — Critical Priority

• Establish robust on-ground verification and onboarding controls for customers, merchants, suppliers, agents, and other business partners.
• Define verification standards for identity, business credentials, ownership, documentation, bank details, physical presence, and other relevant onboarding requirements.
• Design controls to validate the authenticity and accuracy of information collected by field sales and business development teams.
• Establish independent verification mechanisms, sample-based checks, field audits, and risk-based inspections to validate onboarding quality.
• Identify risks arising from fictitious customers or merchants, duplicate registrations, forged documents, incorrect information, unauthorized onboarding, and misuse of business credentials.
• Implement controls to ensure that onboarding is completed only after mandatory checks, validations, and approvals are satisfied.
• Establish ongoing monitoring and periodic revalidation of customer, merchant, and supplier records, based on business risk and applicable requirements.
• Define clear accountability for onboarding errors, policy violations, control breaches, and repeated non-compliance.
• Build effective monitoring mechanisms for large field teams, particularly where onboarding activities are conducted across multiple locations.

3. Fraud Prevention & Operational Risk Management

• Identify and mitigate fraud risks associated with customer acquisition, merchant onboarding, supplier registration, credit transactions, wallet operations, and business development activities.
• Develop preventive and detective controls to identify suspicious patterns, duplicate records, policy violations, and potential financial exposure.
• Establish investigation protocols, root-cause analysis, corrective actions, and preventive measures for identified incidents.
• Work with operations, finance, and technology teams to automate control checks and improve risk detection.
• Assess the effectiveness of existing controls and continuously improve them based on emerging risks, audit findings, and business changes.

4. Internal Controls, Audit & Compliance

• Establish audit-ready business process control frameworks aligned with applicable regulatory, contractual, and internal policy requirements.
• Coordinate internal audits, external audits, process reviews, and control effectiveness assessments.
• Track audit observations, control deficiencies, remediation plans, and closure timelines.
• Ensure appropriate documentation and evidence of onboarding checks, approvals, exceptions, and control reviews.
• Conduct periodic reviews of high-risk processes and business units to assess adherence to established controls.
• Partner with compliance, finance, legal, and internal audit teams to strengthen governance and accountability.

5. Application Security & Technology Controls — Secondary Focus

• Provide oversight of application security and technology-related risks across critical business systems and applications.
• Partner with engineering and technology teams to identify vulnerabilities, strengthen access controls, and address security gaps.
• Ensure appropriate role-based access controls, segregation of duties, periodic access reviews, and timely revocation of access.
• Review security risks associated with applications supporting onboarding, wallet operations, customer data, supplier information, and financial transactions.
• Support vulnerability management, application security testing, secure API integrations, and remediation of critical security issues.
• Ensure appropriate audit logs, monitoring mechanisms, and system-based controls to support business process governance.

6. Leadership & Cross-functional Collaboration

• Lead initiatives to strengthen business process governance, onboarding controls, fraud prevention, and operational risk management.
• Work closely with senior leadership and business stakeholders to balance effective controls with business growth and operational efficiency.
• Build a culture of control ownership, process adherence, and risk awareness across business and field teams.
• Lead and develop a team responsible for process controls, onboarding assurance, and related risk management activities.
• Present periodic updates to leadership on key risks, control effectiveness, onboarding quality, audit observations, and remediation progress.

Desired Candidate Profile

• 10–15 years of relevant experience in business process controls, operational risk, fraud prevention, onboarding governance, enterprise risk, or information security.
• Strong experience in banking, fintech, digital wallets, payments, telecom, credit-led businesses, or similar control-intensive environments.
• Demonstrated experience designing and implementing controls for customer, merchant, supplier, or partner onboarding.
• Hands-on understanding of ground-level onboarding verification, documentation checks, field audits, independent validation, and exception management.
• Experience managing risks associated with large field sales, distribution, merchant acquisition, or business development teams, preferably involving 100+ employees.
• Strong knowledge of fraud prevention, internal controls, maker-checker processes, segregation of duties, approval workflows, and audit mechanisms.
• Ability to identify process weaknesses, investigate control failures, and implement practical, measurable solutions.
• Working knowledge of application security, identity and access management, and technology risk controls.
• Strong stakeholder management skills and the ability to influence business leaders and operational teams.
• Experience leading teams and driving cross-functional control improvement initiatives.

Preferred Qualifications

• Bachelor's or master's degree in Computer Science, Information Technology, Finance, Risk Management, or a related discipline.
• Relevant certifications in risk management, fraud prevention, information security, or internal controls would be an advantage.