Operation Risk Management and Assurance Lead

Amartha is a technology company focused on creating shared prosperity by developing digital financial solutions for the grassroots economy. Founded in 2010 as a microfinance institution, Amartha connects rural, women-led micro-enterprises with affordable capital. Amartha is expanding as a tech company, building a microfinance ecosystem that connects to the growing digital economy through capital, investment, and payment services. By boosting the competitiveness of micro and small entrepreneurs, Amartha empowers women-led MSMEs, creates jobs, and fosters inclusive economic growth.

About The Role

The role focuses on maintaining and improving the Operational Risk Management (ORM) framework, including implementing strategies, policies, and tools like RCSA, LED, KRI, stress testing, BCP testing, BIA, and Branch Operations QA to manage risk effectively and ensure regulatory compliance. It involves timely reporting and escalation of risk issues and action plans to committees such as KMR, KPR, and other supervisory bodies to support oversight by the Board of Directors and Commissioners. The role also includes monitoring the Risk Appetite Statement, reporting any breaches, preparing internal and external risk reports, and conducting risk assessments. Additionally, it provides advice and support to business units on managing risks, especially during the introduction of new products, activities, or policy changes.

Responsibilities

• Developing, updating, enhancing the Operational Risk Management framework and leading the implementation of strategies, policies, procedures, risk appetite and risk tolerance, and tools (i.e. RCSA, LED, KRI, stress testing, BCP Testing, BIA, Branch Operations QA, etc.) to identify, assess, mitigate, monitor and report the risk. Ensuring compliance to regulatory requirements.
• Providing information, proper and timely escalation, and updating action plan to KMR - Komite Manajemen Risiko, KPR - Komite Pemantau Risiko, and any other supervisory bodies, ensuring active supervision from Board of Directors and Commissioners. 
• Conducting regular monitoring of Risk Appetite Statement, proper & timely escalation, and providing advice in case of any breach of Risk Appetite & Risk Tolerance to BoD.
• Preparing regular internal and External (Regulatory) Risk Reporting and conducting Risk Assessment in a timely manner. 
• Providing advice, guidance and support to business units on risk-related matters, including the development of controls and processes to manage risk (i.e. during new product/new activity risk analysis, during new policy and procedure review).
• Collaborating with other departments, i.e. ERM, Branch Operations QA, Credit Risk, Compliance, Legal, Finance, Treasury, IT and IT Security, and Internal Audit, to ensure a coordinated and effective approach to risk management.
• Keeping abreast of regulatory developments and industry best practices in Operational Risk Management and incorporating these into the organization’s Risk Management Framework. Including supporting the development of risk framework for emerging risks (i.e. climate risk, customer & data protection, cyber security risk, new product risk assessment, third party risk management, etc.).
• Ensuring adequacy and effectiveness of capacity to optimize the deliverables.
• Developing and implementing risk training programs, culture campaigns and sharing session to educate employees on risk management best practices. 

Requirements

• Bachelor Management, or related field from a reputable university (at minimum).
• Certified in Risk Management Certification, Internal Control, Compliance, and/or Internal Auditor.
• Have 7 years experience, proven evidence in developing & implementing framework, policy, procedure, tools for Operational Risk, BCM, IT Risk/IT GRC, Compliance, Quality Assurance, ICOFR, Internal Audit, and/or External audit (operational/regulatory audit). 
• Strong analytical skills with the demonstrated ability to research and make decisions based on the day-to-day and complex operational data.
• Proven range of skills including high-level strategic thinking, agile, creative, problem-solving, attention to detail and prioritization.
• Ability to support the development of internal and external communications with cross functional teams, in areas such as strategic, product, Digital IT, SKAI, Legal Compliance, Finance, Treasury, Funding, et al. As well as with external such as Regulator, Commissioners, Vendor, etc.
• Experience creating and/or improving operational processes and internal controls across departments and divisions.
• Proven working experience in project management delivering results.
• Excellent written and verbal communication skills.
• Strong leadership and stakeholder management.
• Strong knowledge of required elements related with Risk and regulation especially in Financial institutions.
• Ability to effectively deal with senior management.
• Comfortable working with numbers and financial reports.
• Excellent in multitasking. 
• Growth and open mindset, balancing risk and return.

At Amartha, we are dedicated to creating a workplace that celebrates diversity, ensures equity, and fosters inclusion. We believe that diverse perspectives—shaped by factors such as gender, age, race, ethnicity, education, culture, and life experiences—drive innovation and growth.

We actively welcome individuals from all backgrounds to join us in building an environment where everyone feels respected, valued, and empowered. Our commitment is to provide equal opportunities and foster a sense of belonging that enables our employees to thrive and make meaningful contributions.