Role Summary

The ERM Specialist owns the end-to-end enterprise risk management cycle at BukuWarung — from policy creation through implementation to review — and supports risk assessment, stakeholder consultation, and partner/vendor due diligence across the company's fintech product lines (EDC/MiniATM, QRIS Soundbox, BaaS, PPOB).

Key Responsibilities

1. Policy Creation & Lifecycle

• Draft enterprise-level policies end-to-end: creation, stakeholder review, implementation, and periodic review/update.

• Maintain version control and track policies through their full lifecycle from draft to active to review.

2. Risk Assessment, Risk Register & Risk Analysis

• Conduct risk assessments and translate findings into a maintained risk register.

• Perform risk analysis to identify root causes and control gaps, and recommend mitigation.

3. Stakeholder Consultation: consult with relevant stakeholders throughout policy and assessment development to ensure practical, well- informed outcomes.

4. Partner/Vendor Due Diligence: conduct due diligence on partners and vendors as part of onboarding and ongoing risk monitoring.

5. Internal & External Liaison: liaise with internal teams and external stakeholders/partners to ensure alignment on risk-related matters.

6. Drive Risk Projects: drives and executes risk projects end-to-end — from planning to closure — across policy, assessment, and governance workstreams.

Qualifications

• Bachelor's degree in Finance, Risk Management, Business, or a related field.

• 2–4 years of experience in enterprise risk management, GRC, or compliance — fintech/banking preferred.

• Problem identification and problem-solving.

• Strong communication, both internal and external.

• Eagerness to learn new things.

• Proactive.

• Project management — able to plan, organize, and drive risk projects end-to-end.