Operation Risk Management and Assurance Lead

PT Amartha Mikro Fintek; Jakarta Selatan; On-site; IDR 600,000,000 - 900,000,000; Full time

Job summary

Amartha is seeking a seasoned Operational Risk Management professional to strengthen its ORM framework, policies, and tools such as RCSA, LED, KRI, stress testing, BCP testing, and BIA. You will ensure regulatory compliance and timely reporting to risk committees, supporting Board oversight.

The role requires a Bachelor’s degree in Management or related field, professional risk certifications, and at least seven years in operational risk or related domains, with strong analytics, leadership, and

Qualifications

• Bachelor degree in management (or related field) from a reputable university.
• Certified in Risk Management, Internal Control, Compliance, and/or Internal Auditor.
• 7 years of experience developing and implementing frameworks, policies, procedures, and tools for Operational Risk, BCM, IT Risk/GRC, Compliance, QA, ICOFR, or audits.
• Strong analytical skills for day-to-day and complex operational data.
• Proven leadership, strategic thinking, and stakeholder management.

Responsibilities

• Develop and update the Operational Risk Management framework and implement strategies, policies, procedures, risk appetite and tools to identify, assess, mitigate, monitor and report risk.
• Provide information, timely escalation, and updates to risk committees (KMR, KPR) and other supervisory bodies.
• Monitor Risk Appetite Statement and advise on breaches of risk appetite and tolerance to Board oversight.
• Prepare internal and external risk reports and conduct risk assessments in a timely manner.
• Advise and support business units on risk-related matters during new products or policy changes.
• Collaborate with ERM, Compliance, Legal, IT, Internal Audit and other functions for coordinated risk management.
• Stay updated on regulatory developments and best practices for emerging risks.

Skills

Operational Risk Management

Regulatory Compliance

Analytical Skills

Leadership

Project Management

Stakeholder Management

IT Risk / IT GRC

BCP Testing

Risk Appetite & Tolerance

Education

Bachelor in Management or related field

Risk Management Certification / Internal Controls / Compliance / Internal Audit

Tools

RCSA

LED

KRI

Stress Testing

BIA

Branch Operations QA

Job description

Amartha is a technology company focused on creating shared prosperity by developing digital financial solutions for the grassroots economy. Founded in 2010 as a microfinance institution, Amartha connects rural, women-led micro-enterprises with affordable capital. Amartha is expanding as a tech company, building a microfinance ecosystem that connects to the growing digital economy through capital, investment, and payment services. By boosting the competitiveness of micro and small entrepreneurs, Amartha empowers women-led MSMEs, creates jobs, and fosters inclusive economic growth.

About The Role

The role focuses on maintaining and improving the Operational Risk Management (ORM) framework, including implementing strategies, policies, and tools like RCSA, LED, KRI, stress testing, BCP testing, BIA, and Branch Operations QA to manage risk effectively and ensure regulatory compliance. It involves timely reporting and escalation of risk issues and action plans to committees such as KMR, KPR, and other supervisory bodies to support oversight by the Board of Directors and Commissioners. The role also includes monitoring the Risk Appetite Statement, reporting any breaches, preparing internal and external risk reports, and conducting risk assessments. Additionally, it provides advice and support to business units on managing risks, especially during the introduction of new products, activities, or policy changes.

Responsibilities

• Developing, updating, enhancing the Operational Risk Management framework and leading the implementation of strategies, policies, procedures, risk appetite and risk tolerance, and tools (i.e. RCSA, LED, KRI, stress testing, BCP Testing, BIA, Branch Operations QA, etc.) to identify, assess, mitigate, monitor and report the risk. Ensuring compliance to regulatory requirements.
• Providing information, proper and timely escalation, and updating action plan to KMR - Komite Manajemen Risiko, KPR - Komite Pemantau Risiko, and any other supervisory bodies, ensuring active supervision from Board of Directors and Commissioners.
• Conducting regular monitoring of Risk Appetite Statement, proper & timely escalation, and providing advice in case of any breach of Risk Appetite & Risk Tolerance to BoD.
• Preparing regular internal and External (Regulatory) Risk Reporting and conducting Risk Assessment in a timely manner.
• Providing advice, guidance and support to business units on risk-related matters, including the development of controls and processes to manage risk (i.e. during new product/new activity risk analysis, during new policy and procedure review).
• Collaborating with other departments, i.e. ERM, Branch Operations QA, Credit Risk, Compliance, Legal, Finance, Treasury, IT and IT Security, and Internal Audit, to ensure a coordinated and effective approach to risk management.
• Keeping abreast of regulatory developments and industry best practices in Operational Risk Management and incorporating these into the organization’s Risk Management Framework. Including supporting the development of risk framework for emerging risks (i.e. climate risk, customer & data protection, cyber security risk, new product risk assessment, third party risk management, etc.).
• Ensuring adequacy and effectiveness of capacity to optimize the deliverables.
• Developing and implementing risk training programs, culture campaigns and sharing session to educate employees on risk management best practices.

• Bachelor Management, or related field from a reputable university (at minimum).
• Certified in Risk Management Certification, Internal Control, Compliance, and/or Internal Auditor.
• Have 7 years experience, proven evidence in developing & implementing framework, policy, procedure, tools for Operational Risk, BCM, IT Risk/IT GRC, Compliance, Quality Assurance, ICOFR, Internal Audit, and/or External audit (operational/regulatory audit).
• Strong analytical skills with the demonstrated ability to research and make decisions based on the day-to-day and complex operational data.
• Proven range of skills including high-level strategic thinking, agile, creative, problem-solving, attention to detail and prioritization.
• Ability to support the development of internal and external communications with cross functional teams, in areas such as strategic, product, Digital IT, SKAI, Legal Compliance, Finance, Treasury, Funding, et al. As well as with external such as Regulator, Commissioners, Vendor, etc.
• Experience creating and/or improving operational processes and internal controls across departments and divisions.
• Proven working experience in project management delivering results.
• Excellent written and verbal communication skills.
• Strong leadership and stakeholder management.
• Strong knowledge of required elements related with Risk and regulation especially in Financial institutions.
• Ability to effectively deal with senior management.
• Comfortable working with numbers and financial reports.
• Excellent in multitasking.
• Growth and open mindset, balancing risk and return.

At Amartha, we are dedicated to creating a workplace that celebrates diversity, ensures equity, and fosters inclusion. We believe that diverse perspectives—shaped by factors such as gender, age, race, ethnicity, education, culture, and life experiences—drive innovation and growth.

We actively welcome individuals from all backgrounds to join us in building an environment where everyone feels respected, valued, and empowered. Our commitment is to provide equal opportunities and foster a sense of belonging that enables our employees to thrive and make meaningful contributions.