Risk Manager

PT CRIF Lembaga Informasi Keuangan; Jakarta Utara; On-site; IDR 279,000,000 - 669,600,000; Full time

Job summary

PT CRIF Lembaga Informasi Keuangan is seeking a Risk Manager to translate current policies into a mature, practical framework that internal teams can run independently. The role strengthens enterprise risk management and aligns with OJK LPIP requirements.

You will review policies, develop the risk framework, manage risk assessments, KRIs, RCSA, and reporting to the Board, coordinating with IT, Compliance, and Internal Audit. Fluent in English and Bahasa Indonesia is preferred.

Qualifications

• Bachelor's degree in Finance, Accounting, Business, Economics, Information Systems, Engineering, or a related field.
• Solid experience in risk management within OJK-regulated financial services (credit bureau/LPIP, banking, multifinance, fintech or similar).
• Hands-on experience implementing Enterprise Risk Management and building Risk Registers, RCSA, KRI and Risk Profiles.
• Good understanding of POJK/SEOJK for LPIP or comparable OJK risk management regulations.
• Experience in BCP/DRP, risk governance, and regulatory or audit findings remediation.

Responsibilities

• Review existing risk management policies, SOPs and practices, and conduct gap analysis against applicable POJK/SEOJK LPIP and relevant standards.
• Develop and enhance the Enterprise Risk Management Framework, Risk Management Charter, Risk Appetite Statement and Risk Tolerance Framework, including governance, the Three Lines Model, roles and responsibilities, and escalation and reporting mechanisms.
• Conduct enterprise-wide risk assessments and maintain the Consolidated Risk Register covering strategic, legal, compliance, operational, cyber, model and reputation risks, as well as credit/data-related risks.
• Design and run the RCSA program, including methodology, templates, control effectiveness assessment, and inherent vs. residual risk scoring.
• Develop the risk profile methodology (inherent risk and quality of risk management implementation) and the risk scoring and rating criteria.
• Define and monitor Key Risk Indicators (KRIs), including early warning indicators for cyber and model risk, and prepare periodic risk dashboards and reporting packs for management, the Board of Directors and the Risk Management Committee.
• Review BCP/DRP from a risk management perspective, including BIA, RTO/RPO recommendations, critical process/system/third-party mapping, and testing plans.
• Work with IT/Information Security to assess cyber risk and recommend incident escalation flows, and assess the use of statistical models, credit scoring and AI, including model inventory, governance, validation and monitoring.
• Manage OJK and ISO findings related to risk management, including root cause analysis, action plans, PIC assignment, evidence requirements and tracking through to closure, in coordination with Compliance and Internal Audit.
• Recommend the risk management organization structure, RACI and job descriptions; revise risk SOPs and policies.

Skills

Enterprise Risk Management

Risk Registers

RCSA

KRI development

Regulatory compliance

Stakeholder communication

Education

Bachelor's degree in Finance/Accounting/Business/Economics/Information Systems/Engineering

Job description

CLIK is a licensed Credit Information Management Institution (LPIP) supervised by the Indonesia Financial Services Authority (OJK). We are strengthening our Enterprise Risk Management function and looking for a Risk Manager to turn existing policies into a mature, practical framework that internal teams can run independently.

Key responsibilities

Review existing risk management policies, SOPs and practices, and conduct gap analysis against applicable POJK/SEOJK LPIP and relevant standards , including readiness for upcoming LPIP regulations.

Develop and enhance the Enterprise Risk Management Framework, Risk Management Charter, Risk Appetite Statement and Risk Tolerance Framework, including governance, the Three Lines Model, roles and responsibilities, and escalation and reporting mechanisms.

Conduct enterprise-wide risk assessments and maintain the Consolidated Risk Register covering strategic, legal, compliance, operational, cyber, model and reputation risks, as well as credit/data-related risks.

Design and run the RCSA program, including methodology, templates, control effectiveness assessment, and inherent vs. residual risk scoring.

Develop the risk profile methodology (inherent risk and quality of risk management implementation) and the risk scoring and rating criteria.

Define and monitor Key Risk Indicators (KRIs), including early warning indicators for cyber and model risk, and prepare periodic risk dashboards and reporting packs for management, the Board of Directors and the Risk Management Committee.

Review BCP/DRP from a risk management perspective, including BIA, RTO/RPO recommendations, critical process/system/third-party mapping, and testing plans.

Work with IT/Information Security to assess cyber risk and recommend incident escalation flows, and assess the use of statistical models, credit scoring and AI, including model inventory, governance, validation and monitoring.

Manage OJK and ISO findings related to risk management, including root cause analysis, action plans, PIC assignment, evidence requirements and tracking through to closure, in coordination with Compliance and Internal Audit.

Recommend the risk management organization structure, RACI and job descriptions; revise risk SOPs and policies.

About you

Bachelor's degree in Finance, Accounting, Business, Economics, Information Systems, Engineering, or a related field.

Solid experience in risk management within OJK-regulated financial services (credit bureau/LPIP, banking, multifinance, fintech or similar).

Hands-on experience implementing Enterprise Risk Management and building Risk Registers, RCSA, KRI and Risk Profiles.

Good understanding of POJK/SEOJK for LPIP or comparable OJK risk management regulations.

Working knowledge of ISO

Experience in BCP/DRP, risk governance, and regulatory or audit findings remediation.

Strong analytical, documentation and presentation skills, with the ability to engage senior management and the Board; experience facilitating workshops and knowledge transfer.

Fluent in English and Bahasa Indonesia, both written and spoken.

Your application will include the following questions:

• Berapa gaji bulanan yang kamu inginkan?
• How many years' experience do you have as a Risk Manager?
• Kualifikasi mana yang kamu miliki?

PT CLIK is an innovative company specializing in credit bureau, predictive analytics and decision systems; our clients are mainly finance companies, insurance companies, utilities and enterprises.