Role Summary

The ERM Specialist owns the end-to-end enterprise risk management cycle at BukuWarung — from policy creation through implementation to review — and supports risk assessment, stakeholder consultation, and partner/vendor due diligence across the company's fintech product lines (EDC/MiniATM, QRIS Soundbox, BaaS, PPOB).

Key Responsibilities

Policy Creation & Lifecycle
Draft enterprise-level policies end-to-end: creation, stakeholder review, implementation, and periodic review/update.
Maintain version control and track policies through their full lifecycle from draft to active to review.
Risk Assessment, Risk Register & Risk Analysis
Conduct risk assessments and translate findings into a maintained risk register.
Perform risk analysis to identify root causes and control gaps, and recommend mitigation.
Stakeholder Consultation: consult with relevant stakeholders throughout policy and assessment development to ensure practical, well- informed outcomes.
Partner/Vendor Due Diligence: conduct due diligence on partners and vendors as part of onboarding and ongoing risk monitoring.
Internal & External Liaison: liaise with internal teams and external stakeholders/partners to ensure alignment on risk-related matters.
Drive Risk Projects: drives and executes risk projects end-to-end — from planning to closure — across policy, assessment, and governance workstreams.

Qualifications

Bachelor's degree in Finance, Risk Management, Business, or a related field.
2–4 years of experience in enterprise risk management, GRC, or compliance — fintech/banking preferred.
Problem identification and problem-solving.
Strong communication, both internal and external.
Eagerness to learn new things.
Proactive.
Project management — able to plan, organize, and drive risk projects end-to-end.

Enterprise Risk Management (ERM) Specialist