Enterprise Risk Manager – POJK/ISO & Framework Lead

PT CRIF Lembaga Informasi Keuangan; Jakarta Utara; On-site; IDR 279,000,000 - 669,600,000; Full time

Job summary

PT CRIF Lembaga Informasi Keuangan is seeking a Risk Manager to translate current policies into a mature, practical framework that internal teams can run independently. The role strengthens enterprise risk management and aligns with OJK LPIP requirements.

You will review policies, develop the risk framework, manage risk assessments, KRIs, RCSA, and reporting to the Board, coordinating with IT, Compliance, and Internal Audit. Fluent in English and Bahasa Indonesia is preferred.

Qualifications

• Bachelor's degree in Finance, Accounting, Business, Economics, Information Systems, Engineering, or a related field.
• Solid experience in risk management within OJK-regulated financial services (credit bureau/LPIP, banking, multifinance, fintech or similar).
• Hands-on experience implementing Enterprise Risk Management and building Risk Registers, RCSA, KRI and Risk Profiles.
• Good understanding of POJK/SEOJK for LPIP or comparable OJK risk management regulations.
• Experience in BCP/DRP, risk governance, and regulatory or audit findings remediation.

Responsibilities

• Review existing risk management policies, SOPs and practices, and conduct gap analysis against applicable POJK/SEOJK LPIP and relevant standards.
• Develop and enhance the Enterprise Risk Management Framework, Risk Management Charter, Risk Appetite Statement and Risk Tolerance Framework, including governance, the Three Lines Model, roles and responsibilities, and escalation and reporting mechanisms.
• Conduct enterprise-wide risk assessments and maintain the Consolidated Risk Register covering strategic, legal, compliance, operational, cyber, model and reputation risks, as well as credit/data-related risks.
• Design and run the RCSA program, including methodology, templates, control effectiveness assessment, and inherent vs. residual risk scoring.
• Develop the risk profile methodology (inherent risk and quality of risk management implementation) and the risk scoring and rating criteria.
• Define and monitor Key Risk Indicators (KRIs), including early warning indicators for cyber and model risk, and prepare periodic risk dashboards and reporting packs for management, the Board of Directors and the Risk Management Committee.
• Review BCP/DRP from a risk management perspective, including BIA, RTO/RPO recommendations, critical process/system/third-party mapping, and testing plans.
• Work with IT/Information Security to assess cyber risk and recommend incident escalation flows, and assess the use of statistical models, credit scoring and AI, including model inventory, governance, validation and monitoring.
• Manage OJK and ISO findings related to risk management, including root cause analysis, action plans, PIC assignment, evidence requirements and tracking through to closure, in coordination with Compliance and Internal Audit.
• Recommend the risk management organization structure, RACI and job descriptions; revise risk SOPs and policies.

Skills

Enterprise Risk Management

Risk Registers

RCSA

KRI development

Regulatory compliance

Stakeholder communication

Education

Bachelor's degree in Finance/Accounting/Business/Economics/Information Systems/Engineering

Job description

PT CRIF Lembaga Informasi Keuangan is seeking a Risk Manager to translate current policies into a mature, practical framework that internal teams can run independently. The role strengthens enterprise risk management and aligns with OJK LPIP requirements.

You will review policies, develop the risk framework, manage risk assessments, KRIs, RCSA, and reporting to the Board, coordinating with IT, Compliance, and Internal Audit. Fluent in English and Bahasa Indonesia is preferred.