Risk Specialist – P2P Lending and Payment (Indonesia)

ByteDance; Jakarta Pusat; On-site; IDR 300,000,000 - 600,000,000; Full time

Job summary

ByteDance in Indonesia seeks a Risk Specialist to translate the Enterprise Risk Management Framework into practical actions across payments and P2P lending. You will collaborate with Credit, Compliance, Product, Operations, Technology, and Finance to keep risk within appetite.

The role is onsite with a 5-day work arrangement, reporting to the Risk Management function. Strong knowledge of BI/data tools and regulatory requirements is essential.

Qualifications

• Bachelor's degree in Finance, Risk Management, Economics, Accounting, or related field.
• 5+ years of experience in risk management, internal control, credit risk, or internal audit, ideally in fintech/payments.
• Working knowledge of Indonesian regulations (OJK, BI) and AFPI Code of Conduct.
• Fluency in Bahasa Indonesia and English.

Responsibilities

• Develop and maintain Indonesia's enterprise risk management framework, risk register, policies, standards and procedures.
• Identify and assess risks across payments, lending, and marketplace operations.
• Establish risk appetite, limits and escalation thresholds with functional risk owners.
• Assess controls and residual risks; ensure remediation for risks above appetite.
• Coordinate with compliance and BI to support assurance programs and BI reporting.
• Prepare risk reports and dashboards for RMC, senior management, and Board.

Skills

Risk management

Regulatory knowledge

Data analysis

Communication

English

Education

Bachelor's degree in Finance / Economics / related field

Tools

Excel

SQL

Python

BI tools

Job description

Responsibilities

About the team The Global Payment team of ByteDance provides payment solutions - including payment acquisitions, disbursements, transaction monitoring, payment method management, foreign exchange conversion, accounting, reconciliations, and so on to ensure that our users have a smooth and secure payment experience on ByteDance platforms including TikTok.

The Risk Specialist sits within the Risk Management function of the Payments and P2P Lending (fintech peer-to-peer / Layanan Pendanaan Bersama Berbasis Teknologi Informasi) business in Indonesia. The role executes the day-to-day operation of the Enterprise Risk Management Framework (ERMF), translating it into practical, platform-specific risk activities across payments, borrower, lender/funder, and marketplace operations.

The Risk Specialist supports the Senior Management in identifying, measuring, monitoring, and reporting on risks inherent in the payments and lending platform's business activities, and works closely with Credit, Collections, Product, Operations, Technology, Compliance, and Finance/Treasury to keep the risk profile within approved appetite.

This role will be based onsite at our office and will require a 5-day onsite work arrangement.

Key Responsibilities

• Develop, maintain and continuously improve the Indonesia enterprise risk management framework, risk register, policies, standards and procedures.
• Identify and assess risks inherent to the Payment and P2P lending business, including but not limited to borrower credit risk, lender/funder concentration risk, platform liquidity and cash-flow risk, operational and technology risk, and third-party/BPO risk.
• Establish and maintain the risk appetite, risk limits and escalation thresholds for Payment and P2P lending entities, partnering with respective functional risk owners.
• Identify and assess controls and the control environment for the Payment and P2P lending entities to derive the entities' residual risks. Evaluate residual risks and ensure that risks above appetite have clear risk decisioning.
• Support Indonesia-related Compliance Assurance programs and perform testing in accordance with the Compliance Assurance methodology.
• Monitor corrective actions and verify that material control weaknesses are remediated effectively.
• Evaluate and evolve risk measurement methodologies for the lending book and payments portfolio.
• Monitor the company's risk profile and elevate material exposures, limit breaches and control deficiencies; liaise with risk owners to formulate remediation actions.
• Track compliance with OJK lending limits (e.g., maximum loan ceiling per borrower, aggregate financing ratios) and industry codes of conduct (AFPI).
• Coordinate and prepare materials for entity or local Risk Management Committee (RMC) meetings, track action items, and elevate emerging risks. Provide recommendations to business and product teams and to the RMC on risk treatment (mitigate/accept/etc.).
• Ensure that proposed products, activities, material changes and cooperation arrangements undergo appropriate risk assessment and obtain required Bank Indonesia approval before implementation.
• Conduct third-party risk assessments in accordance with Bank Indonesia (BI) requirements.
• Prepare and submit periodic risk profile reports and portfolio quality dashboards to the RMC, senior management, and the Board of Directors / President Director.
• Submit routine and incidental risk management reports to Bank Indonesia (BI), including TIKMI reporting, in accordance with applicable regulations.
• Monitor key risk indicators (KRIs) including TKB90, portfolio-at-risk, funding concentration ratios, and default rates, elevating breaches of risk appetite.
• Partner with Compliance to identify local regulatory requirements (e.g., OJK financing company regulations, Bank Indonesia (BI) regulations for payment service providers (PJP)) that should feed into the risk register and training needs.
• Act as the first point of contact for business and product teams on risk identification, scoring methodology, and treatment options for new initiatives.
• Coordinate with respective second-line stakeholders (e.g., Technology, Security, Financial Crime) to provide a holistic view of the risk landscape of the entity.
• Deliver risk management training and promote a strong risk culture throughout the business.
• Support effective coordination between local management, regional risk functions and group control functions.

Qualifications

Minimum Qualification(s)

• Bachelor's degree in Finance, Risk Management, Economics, Accounting, or a related field;
• 5+ years of experience in risk management, internal control, credit risk, or internal audit, ideally within a Payments P2P lending, multifinance, or fintech environment regulated by OJK/BI.
• Working knowledge of OJK regulations applicable to P2P lending (POJK 10/2022, POJK 40/2024, POJK 42/2024 and subsequent amendments), BI regulations applicable to PJP (PBI No. 10/2025 and PADG No. 32/2025), the AFPI Code of Conduct, and Indonesia's AML/CFT/CPF requirements for financial institutions.
• Fluency in Bahasa Indonesia and English (written and spoken).

Preferred Qualification(s)

• Strong quantitative and analytical skills; Comfortable working with credit and portfolio data (Excel/SQL/Python or BI tools).
• Sound understanding of enterprise risk management frameworks (risk identification, measurement, monitoring, reporting).
• Clear written and verbal communication for reporting to committees and senior management.
• Ability to work cross-functionally with product, credit, compliance, and technology teams.
• High attention to detail and sound judgement in a fast-moving, regulated fintech environment.
• Proactive, able to work independently while escalating issues appropriately.
• Holding an AFPI certification at the level one below Director (or equivalent) is an advantage.
• A professional risk certification (e.g., CRMP, FRM, CRP, CA) is an advantage.

About Us

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Lemon8, CapCut and Pico as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join ByteDance

Inspiring creativity is at the core of ByteDance's mission. Our innovative products are built to help people authentically express themselves, discover and connect – and our global, diverse teams make that possible. Together, we create value for our communities, inspire creativity and enrich life - a mission we work towards every day.

As ByteDancers, we strive to do great things with great people. We lead with curiosity, humility, and a desire to make impact in a rapidly growing tech company. By constantly iterating and fostering an "Always Day 1" mindset, we achieve meaningful breakthroughs for ourselves, our Company, and our users. When we create and grow together, the possibilities are limitless. Join us.

Diversity & Inclusion

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.