AVP of Enterprise Risk Management

Build What Matters. Grow Beyond Limits.

DOKU is where innovation meets real impact, creating seamless, secure payment experiences for millions, every day.

About The Role:

The Enterprise Risk Management (ERM) Manager position is responsible for implementing the company’s risk management framework in alignment with Bank Indonesia regulatory requirements, particularly those set under Peraturan Bank Indonesia (PBI), as well as internal policies and industry standards for Payment Service Providers. This role ensures business continuity, safeguards the integrity of payment systems, and mitigates strategic, operational, compliance, financial, technology, and reputational risks.

The ERM Manager also acts as a cross-functional liaison (Risk, Compliance, Business, IT Security, Legal, Operations, and others) to build a strong risk-aware culture across the organization and ensure that the risk assessment process is conducted consistently, measurably, and well-documented.

What Will You Do:

• Development & Implementation of Risk Framework
• Established and communicated Company Risk Appetite Statement and Risk Taxonomy.
• A centralized, active Corporate Risk Register is maintained and integrated into all business unit planning cycles.
• Quarterly and ad-hoc risk assessments conducted for strategic, operational, technology, and compliance risks (including AML-CFT and data security).
• Business Continuity & Incident Management
• Risk Culture & Cross-Functional Coordination
• Regulatory Compliance & Reporting

What we are looking for:

• Minimum Bachelor’s Degree (S1) in Economics, Management, Finance, Law, or Information Technology/Systems. Master’s degree preferred.
• Minimum 5 years of progressive experience in risk management, internal audit, or compliance within the payment gateway, fintech, banking, or financial services industry.
• Demonstrated understanding of Bank Indonesia regulations for Payment Service Providers (PJP), ISO 31000, and experience in systematically preparing risk registers, KRIs, and management reports

Soft Skill Requirements:

• Leadership & Influence: Ability to lead cross-functional teams and champion risk culture without direct authority.
• Analytical & Critical Thinking: Transforms complex data into strategic insights and actionable risk intelligence.
• Communication: Articulates risk concepts and reports clearly to technical and non-technical audiences, including senior management and regulators.
• Problem-Solving: Identifies root causes of risks and develops pragmatic, effective mitigation strategies.
• Collaboration & Teamwork: Builds strong relationships and coordinates effectively across all organizational divisions.
• High Integrity & Ethics: Maintains objectivity, confidentiality, and the highest ethical standards in all risk assessments and decisions

Technical Skill Requirements:

• In-depth knowledge of ERM Frameworks (ISO 31000, COSO), BI regulations (PBI for PJP, Risk Management, BCP, AML-CFT), and risk scoring methodologies.
• Proficiency in developing risk dashboards, loss event databases, KRI metrics, and using GRC tools, Excel, and Power BI.
• Strong understanding of financial technology, data security principles, incident management, and IT audit.
• Experience with Business Continuity (BCP/DRP) testing and enterprise-wide risk integration concepts.
• Professional risk management certification (e.g., CRMP, FRM, or equivalent) is highly desirable

#LI-Onsite

Be part of a team shaping what’s next.

Explore opportunities at doku.com/career