Risk Policy & Strategy Manager

ACCA Careers; Jakarta Pusat; On-site; IDR 400,000,000 - 700,000,000; Full time

Job summary

Grab Indonesia's ID Trust & Safety Fraud Strategy team seeks a senior Risk Policy & Strategy Manager to own OVO's fraud risk policy across the full payments lifecycle—cash-in, purchase, cash-out, transfer, and OVO Points. You are accountable for OKRs related to promo abuse loss, account takeover, complaints, and transaction declines.

You will partner with Product, Engineering, Data, Operations, and Compliance, and serve as the risk representative in external engagements with regulators and

Qualifications

• 5+ years in fraud risk management, risk policy, or financial crime strategy — fintech/digital payments preferred.
• Strong understanding of digital payment fraud typologies (promo abuse, account takeover, scams, mule accounts, QRIS risks).
• Experience writing and owning risk policy frameworks from threat identification to rule design and regulatory documentation.
• Proficiency in data-driven decision-making; interpret fraud metrics and SQL dashboards.
• Experience with fraud decisioning systems and governance workflows (Maker-Checker).
• Excellent stakeholder management across product, engineering, data, and compliance; regulatory liaison skills.

Responsibilities

• Define and maintain the anti-fraud risk framework for OVO across the payments lifecycle.
• Track and optimize fraud metrics (loss, incident, complaint, transaction decline rates).
• Manage fraud detection rules, Maker-Checker SOPs, and pre-launch risk assessments.
• Lead RCA for fraud incidents and produce remediation and audit-ready evidence.
• Collaborate with regulators (OJK, BI, PPATK) and cross-functional teams to align risk positions.

Skills

Fraud risk management

Policy writing

Data-driven decisions

SQL dashboards

Regulatory documentation

Stakeholder management

Tools

Fraud decisioning systems

Job description

Company Description

Grab is Southeast Asia's leading superapp. From getting your favourite meals delivered to helping you manage your finances and getting around town hassle-free, we've got your back with everything. In Grab, purpose gives us joy and habits build excellence, while harnessing the power of Technology and AI to deliver the mission of driving Southeast Asia forward by economically empowering everyone, with heart, hunger, honour, and humility.

Company Description

Grab is Southeast Asia's leading superapp. From getting your favourite meals delivered to helping you manage your finances and getting around town hassle-free, we've got your back with everything. In Grab, purpose gives us joy and habits build excellence, while harnessing the power of Technology and AI to deliver the mission of driving Southeast Asia forward by economically empowering everyone, with heart, hunger, honour, and humility.

Job Description

About The Team

The ID Trust & Safety's Fraud Strategy team protects Grab Indonesia's financial ecosystem (OVO, Grab Payments, and Ofin) from fraud, including scams, promo abuse, and unauthorized transactions. As a high-ownership team, we manage end-to-end fraud prevention. We analyze emerging threats, write risk policies, and collaborate with cross-functional partners (Product, Engineering, Compliance) and regulators (OJK, BI) to minimize fraud losses.

Get To Know The Role

As Risk Policy & Strategy Manager, OVO, you will own OVO's fraud risk strategy and policy across the full payments lifecycle — cash-in, purchase, cash-out, transfer, and OVO Points. You are the accountable person for OVO's fraud OKRs: Promo Abuse Loss Rate, Account Takeover Incident Rate, Complaint Rate, and transaction Decline Rates.

You will work closely with OVO's product, engineering, data, operations, and compliance teams. You will also serve as the OVO risk representative in external engagements — including regulatory discussions, internal/external audits, and cross-entity risk alignment across Grab, OVO, and Ofin.

This is a senior individual contributor role with broad scope. You will be reporting to the Fraud Strategy Manager. This is an onsite role based in Jakarta.

Critical Task You Will Perform

• Strategy & Policy Ownership: Define and maintain the anti-fraud risk framework for OVO, targeting promo abuse, account takeovers, scams, and emerging fraud patterns.
• Metric & OKR Accountability: Track and optimize core fraud metrics, including loss, incident, complaint, and transaction decline rates across the user lifecycle.
• Risk Controls & Product Assessment: Manage fraud detection rules, enforce Maker-Checker SOPs, and conduct pre-launch risk assessments to catch product vulnerabilities early.
• Incident Response & Root Cause Analysis: Lead Root Cause Analysis (RCA) for fraud incidents, deliver remediation reports, and maintain audit-ready evidence for internal and external auditors.
• Stakeholder & Regulatory Alignment: Partner with cross-functional teams (Product, Engineering, Compliance) and support engagements with key regulators like OJK, BI, and PPATK.

Qualifications

• 5+ years in fraud risk management, risk policy, or financial crime strategy — ideally within a fintech, digital payments, or e-wallet environment.
• Strong understanding of digital payment fraud typologies: promo abuse, Account Takeover, scams, mule accounts, unauthorized app exploitation, and QRIS/payment-rail-specific risks.
• Demonstrated experience writing and owning risk policy frameworks — from threat identification through rule design, escalation thresholds, and regulatory documentation.
• Proficiency in data-driven decision-making: ability to interpret fraud metrics, review SQL-based dashboards, and translate data signals into policy and rule changes.
• Experience working with fraud decisioning systems (e.g., GrabDefence/Griffin or equivalent rule engines) and familiarity with Maker-Checker governance workflows.
• Strong stakeholder management skills — comfortable engaging cross-functional teams (Product, Eng, Data, Compliance) and representing risk positions to senior leadership and external regulators (OJK, BI, PPATK).
• Fluency in Bahasa Indonesia and English (written and spoken) — required for regulatory documentation, internal SOPs, and cross-regional collaboration.
• Experience with regulatory engagement in Indonesia's fintech landscape (OJK, BI, PPATK) is a strong plus.