Role Summary
The ERM Specialist owns the end-to-end enterprise risk management cycle at BukuWarung — from policy creation through implementation to review — and supports risk assessment, stakeholder consultation, and partner/vendor due diligence across the company's fintech product lines (EDC/MiniATM, QRIS Soundbox, BaaS, PPOB).
Key Responsibilities
- Policy Creation & Lifecycle
- Draft enterprise-level policies end-to-end: creation, stakeholder review, implementation, and periodic review/update.
- Maintain version control and track policies through their full lifecycle from draft to active to review.
- Risk Assessment, Risk Register & Risk Analysis
- Conduct risk assessments and translate findings into a maintained risk register.
- Perform risk analysis to identify root causes and control gaps, and recommend mitigation.
- Stakeholder Consultation: consult with relevant stakeholders throughout policy and assessment development to ensure practical, well- informed outcomes.
- Partner/Vendor Due Diligence: conduct due diligence on partners and vendors as part of onboarding and ongoing risk monitoring.
- Internal & External Liaison: liaise with internal teams and external stakeholders/partners to ensure alignment on risk-related matters.
- Drive Risk Projects: drives and executes risk projects end-to-end — from planning to closure — across policy, assessment, and governance workstreams.
Qualifications
- Bachelor's degree in Finance, Risk Management, Business, or a related field.
- 2–4 years of experience in enterprise risk management, GRC, or compliance — fintech/banking preferred.
- Problem identification and problem-solving.
- Strong communication, both internal and external.
- Eagerness to learn new things.
- Proactive.
- Project management — able to plan, organize, and drive risk projects end-to-end.
