Risk Policy & Strategy Manager

acca careers; Indonesia; On-site; IDR 16,266 - 19,880; Full time

Job summary

Grab Indonesia, a leading Southeast Asian superapp, is seeking a senior Risk Policy & Strategy Manager for its ID Trust & Safety Fraud Strategy team. You will own the fraud risk strategy across the full payments lifecycle for OVO, coordinating with Product, Engineering, Data, Operations, and Compliance.

This onsite role is based in Jakarta and reports to the Fraud Strategy Manager. Responsibilities include defining the anti-fraud framework, tracking key metrics, enforcing risk controls, leading

Qualifications

• 5+ years in fraud risk management, risk policy, or financial crime strategy in fintech/digital payments.
• Strong understanding of digital payment fraud typologies: promo abuse, Account Takeover, scams, mule accounts, unauthorized app exploitation, and QRIS risks.
• Experience writing and owning risk policy frameworks—from threat identification through rule design, escalation thresholds, and regulatory documentation.
• Proficiency in data-driven decision-making: interpret fraud metrics, review SQL-based dashboards, and translate data signals into policy and rule changes.
• Experience working with fraud decisioning systems (GrabDefence/Griffin) and Maker-Checker governance workflows.
• Fluency in Bahasa Indonesia and English (written and spoken).
• Experience with regulatory engagement in Indonesia's fintech landscape (OJK, BI, PPATK) is a strong plus.

Responsibilities

• Strategy & Policy Ownership: Define and maintain the anti-fraud risk framework for OVO, targeting promo abuse and account takeovers.
• Metric & OKR Accountability: Track and optimize core fraud metrics across the user lifecycle.
• Risk Controls & Product Assessment: Manage fraud detection rules and conduct risk assessments for pre-launch stages.
• Incident Response & Root Cause Analysis: Lead RCA for fraud incidents and prepare audit-ready remediation reports.
• Stakeholder & Regulatory Alignment: Partner with cross-functional teams and regulators like OJK, BI, and PPATK.

Skills

Fraud risk management

Risk policy

Financial crime strategy

Data-driven decision making

Regulatory engagement

Stakeholder management

Tools

SQL

GrabDefence/Griffin

Job description

Company Description

Grab is Southeast Asia's leading superapp. From getting your favourite meals delivered to helping you manage your finances and getting around town hassle‑free, we've got your back with everything. In Grab, purpose gives us joy and habits build excellence, while harnessing the power of Technology and AI to deliver the mission of driving Southeast Asia forward by economically empowering everyone, with heart, hunger, honour, and humility.

Job Description

About the Team

The ID Trust & Safety's Fraud Strategy team protects Grab Indonesia's financial ecosystem (OVO, Grab Payments, and Ofin) from fraud, including scams, promo abuse, and unauthorized transactions. As a high‑ownership team, we manage end‑to‑end fraud prevention. We analyze emerging threats, write risk policies, and collaborate with cross‑functional partners (Product, Engineering, Compliance) and regulators (OJK, BI) to minimize fraud losses.

Get To Know The Role

As Risk Policy & Strategy Manager, OVO, you will own OVO's fraud risk strategy and policy across the full payments lifecycle — cash‑in, purchase, cash‑out, transfer, and OVO Points. You are the accountable person for OVO's fraud OKRs: Promo Abuse Loss Rate, Account Takeover Incident Rate, Complaint Rate, and transaction Decline Rates.

You will work closely with OVO's product, engineering, data, operations, and compliance teams. You will also serve as the OVO risk representative in external engagements — including regulatory discussions, internal/external audits, and cross‑entity risk alignment across Grab, OVO, and Ofin.

This is a senior individual contributor role with broad scope. You will be reporting to the Fraud Strategy Manager. This is an onsite role based in Jakarta.

Critical Task You Will Perform

• Strategy & Policy Ownership: Define and maintain the anti‑fraud risk framework for OVO, targeting promo abuse, account takeovers, scams, and emerging fraud patterns.
• Metric & OKR Accountability: Track and optimize core fraud metrics, including loss, incident, complaint, and transaction decline rates across the user lifecycle.
• Risk Controls & Product Assessment: Manage fraud detection rules, enforce Maker‑Checker SOPs, and conduct pre‑launch risk assessments to catch product vulnerabilities early.
• Incident Response & Root Cause Analysis: Lead Root Cause Analysis (RCA) for fraud incidents, deliver remediation reports, and maintain audit‑ready evidence for internal and external auditors.
• Stakeholder & Regulatory Alignment: Partner with cross‑functional teams (Product, Engineering, Compliance) and support engagements with key regulators like OJK, BI, and PPATK.

Qualifications

• 5+ years in fraud risk management, risk policy, or financial crime strategy — ideally within a fintech, digital payments, or e‑wallet environment.
• Strong understanding of digital payment fraud typologies: promo abuse, Account Takeover, scams, mule accounts, unauthorized app exploitation, and QRIS/payment‑rail‑specific risks.
• Demonstrated experience writing and owning risk policy frameworks — from threat identification through rule design, escalation thresholds, and regulatory documentation.
• Proficiency in data‑driven decision‑making: ability to interpret fraud metrics, review SQL‑based dashboards, and translate data signals into policy and rule changes.
• Experience working with fraud decisioning systems (e.g., GrabDefence/Griffin or equivalent rule engines) and familiarity with Maker‑Checker governance workflows.
• Strong stakeholder management skills — comfortable engaging cross‑functional teams (Product, Eng, Data, Compliance) and representing risk positions to senior leadership and external regulators (OJK, BI, PPATK).
• Fluency in Bahasa Indonesia and English (written and spoken) — required for regulatory documentation, internal SOPs, and cross‑regional collaboration.
• Experience with regulatory engagement in Indonesia's fintech landscape (OJK, BI, PPATK) is a strong plus.