Enterprise Risk Management

Amartha is a technology company focused on creating shared prosperity by developing digital financial solutions for the grassroots economy. Founded in 2010 as a microfinance institution, Amartha connects rural, women-led micro-enterprises with affordable capital. Amartha is expanding as a tech company, building a microfinance ecosystem that connects to the growing digital economy through capital, investment, and payment services. By boosting the competitiveness of micro and small entrepreneurs, Amartha empowers women-led MSMEs, creates jobs, and fosters inclusive economic growth.

**About The Role**

This role is responsible for developing, updating, and enhancing the Enterprise Risk Management (ERM) framework, and leading the implementation of risk strategies, policies, procedures, the Risk Appetite Framework, and tools to manage risk across the organization. It includes ensuring regulatory compliance, acting as the secretary for key risk committees (KMR and KPR), supporting the Board of Directors and Commissioners through timely preparation of meeting materials, monitoring action plans, and providing necessary updates. The role also involves regular monitoring of Key Risk Indicators (KRIs) and the Risk Appetite Statement, including escalation and advisory to the Board in case of breaches

**Responsibilities**:

- Developing, updating, enhancing the ERM framework and leading the implementation of risk strategies, policies, procedures, risk appetite framework, and tools to identify, assess, mitigate, monitor and report the risk. Ensuring compliance to regulatory requirements
- Acting as the secretary of committees (i.e. KMR - Komite Management Risiko, KPR - Komite Pemantau Risiko), ensuring active supervision from Board of Directors and Commissioners. Preparing deck and minutes of meeting in a timely manner, monitoring action plan, providing necessary data, and providing updates to Head/Group Head, Board of Directors, Commissioners, and Regulator
- Developing, updating, enhancing, and conducting regular monitoring of Key Risk Indicator (KRI), Risk Appetite Statement, including proper escalation and providing advice in case of any breach of to BoD
- Preparing regular internal and External/Regulatory Risk Reporting and conducting Risk Assessment on timely manner (i.e. Laporan Tingkat Kesehatan on yearly basis, and other related reports)- Scope: 8 types of risks exposing the Company
- Responsibilities I.e: review the parameters and ratios, providing advice and professional judgment on the risk rating, advising the risk management strategies (including mitigation and action plan)
- Objective: Providing senior management with an accurate picture of the organization’s risk profile for management decisions
- Providing advice, guidance and support to business units on risk-related matters, including the development of controls and processes to manage risk (i.e. during new product/new activity risk analysis, etc.)
- Collaborating with other departments, i.e. ORM, QA, Credit Risk, Compliance, Legal, Finance, Treasury, IT and IT Security, and Internal Audit, to ensure a coordinated and effective approach to risk management
- Keeping abreast of regulatory developments and industry best practices in Operational Risk Management, ERM, Financial Risk Management, Technology Risk, and incorporating these into the organization’s Risk Management Framework. Including supporting the development of risk framework for emerging risks (i.e.climate risk, cyber security risk, new product risk assessment, third party risk management, etc.)
- Ensuring adequacy and effectiveness of capacity to optimize the deliverables
- Developing and implementing risk training programs, culture campaigns and sharing sessions to educate employees on risk management best practices.

**Requirements**:

- Bachelor’s degree in Risk Management or related field (minimum)
- Risk Management, Internal Control, Compliance, and/or Internal Audit certification (preferred for Senior Analyst, required for Lead)
- Relevant experience in Enterprise Risk, Operational Risk, Legal, Compliance, Internal Audit, and/or External Audit:
- **Senior Analyst**: 4-5 years- **Lead**: 7+ years
Preferably from Banking, Financing, or P2P Lending
- Strong analytical and problem-solving skills, with the ability to make decisions based on operational and complex data
- Skilled in cross-functional collaboration and stakeholder management, including with regulators and external partners
- Proven ability to improve processes, strengthen internal controls, and manage projects to successful delivery
- Excellent written and verbal communication skills
- Solid knowledge of risk and regulatory requirements in financial institutions
- Ability to multitask and prioritize, balancing risk and return with a growth mindset

At Amartha, we are dedicated to creating a workplace that celebrates diversity, ensures equity, and fosters inclusion. We believe that diverse perspectives—shaped by factors such a