Risk Manager

About the role

CLIK is a licensed Credit Information Management Institution (LPIP) supervised by the Indonesia Financial Services Authority (OJK). We are strengthening our Enterprise Risk Management function and looking for a Risk Manager to turn existing policies into a mature, practical framework that internal teams can run independently.

Key responsibilities

• Review existing risk management policies, SOPs and practices, and conduct gap analysis against applicable POJK/SEOJK LPIP and relevant standards , including readiness for upcoming LPIP regulations.
• Develop and enhance the Enterprise Risk Management Framework, Risk Management Charter, Risk Appetite Statement and Risk Tolerance Framework, including governance, the Three Lines Model, roles and responsibilities, and escalation and reporting mechanisms.
• Conduct enterprise-wide risk assessments and maintain the Consolidated Risk Register covering strategic, legal, compliance, operational, cyber, model and reputation risks, as well as credit/data-related risks.
• Design and run the RCSA program, including methodology, templates, control effectiveness assessment, and inherent vs. residual risk scoring.
• Develop the risk profile methodology (inherent risk and quality of risk management implementation) and the risk scoring and rating criteria.
• Define and monitor Key Risk Indicators (KRIs), including early warning indicators for cyber and model risk, and prepare periodic risk dashboards and reporting packs for management, the Board of Directors and the Risk Management Committee.
• Review BCP/DRP from a risk management perspective, including BIA, RTO/RPO recommendations, critical process/system/third-party mapping, and testing plans.
• Work with IT/Information Security to assess cyber risk and recommend incident escalation flows, and assess the use of statistical models, credit scoring and AI, including model inventory, governance, validation and monitoring.
• Manage OJK and ISO findings related to risk management, including root cause analysis, action plans, PIC assignment, evidence requirements and tracking through to closure, in coordination with Compliance and Internal Audit.
• Recommend the risk management organization structure, RACI and job descriptions; revise risk SOPs and policies.

About you

• Bachelor's degree in Finance, Accounting, Business, Economics, Information Systems, Engineering, or a related field.
• Solid experience in risk management within OJK-regulated financial services (credit bureau/LPIP, banking, multifinance, fintech or similar).
• Hands-on experience implementing Enterprise Risk Management and building Risk Registers, RCSA, KRI and Risk Profiles.
• Good understanding of POJK/SEOJK for LPIP or comparable OJK risk management regulations.
• Working knowledge of ISO
• Experience in BCP/DRP, risk governance, and regulatory or audit findings remediation.
• Strong analytical, documentation and presentation skills, with the ability to engage senior management and the Board; experience facilitating workshops and knowledge transfer.
• Fluent in English and Bahasa Indonesia, both written and spoken.