Risk Specialist – P2P Lending and Payment (Indonesia)

About the team
The Global Payment team of ByteDance provides payment solutions - including payment acquisitions, disbursements, transaction monitoring, payment method management, foreign exchange conversion, accounting, reconciliations, and so on to ensure that our users have a smooth and secure payment experience on ByteDance platforms including TikTok.

Role Overview
The Risk Specialist sits within the Risk Management function of the Payments and P2P Lending (fintech peer-to-peer / Layanan Pendanaan Bersama Berbasis Teknologi Informasi) business in Indonesia. The role executes the day-to-day operation of the Enterprise Risk Management Framework (ERMF), translating it into practical, platform-specific risk activities across payments, borrower, lender/funder, and marketplace operations.
The Risk Specialist supports the Senior Management in identifying, measuring, monitoring, and reporting on risks inherent in the payments and lending platform's business activities, and works closely with Credit, Collections, Product, Operations, Technology, Compliance, and Finance/Treasury to keep the risk profile within approved appetite.

This role will be based onsite at our office and will require a 5-day onsite work arrangement.

Key Responsibilities
- Develop, maintain and continuously improve the Indonesia enterprise risk management framework, risk register, policies, standards and procedures.
- Identify and assess risks inherent to the Payment and P2P lending business, including but not limited to borrower credit risk, lender/funder concentration risk, platform liquidity and cash-flow risk, operational and technology risk, and third-party/BPO risk.
- Establish and maintain the risk appetite, risk limits and escalation thresholds for Payment and P2P lending entities, partnering with respective functional risk owners.
- Identify and assess controls and the control environment for the Payment and P2P lending entities to derive the entities' residual risks. Evaluate residual risks and ensure that risks above appetite have clear risk decisioning.
- Support Indonesia-related Compliance Assurance programs and perform testing in accordance with the Compliance Assurance methodology.
- Monitor corrective actions and verify that material control weaknesses are remediated effectively.
- Evaluate and evolve risk measurement methodologies for the lending book and payments portfolio.
- Monitor the company's risk profile and escalate material exposures, limit breaches and control deficiencies; liaise with risk owners to formulate remediation actions.
- Track compliance with OJK lending limits (e.g., maximum loan ceiling per borrower, aggregate financing ratios) and industry codes of conduct (AFPI).
- Coordinate and prepare materials for entity or local Risk Management Committee (RMC) meetings, track action items, and escalate emerging risks. Provide recommendations to business and product teams and to the RMC on risk treatment (mitigate/accept/etc.).
- Ensure that proposed products, activities, material changes and cooperation arrangements undergo appropriate risk assessment and obtain required Bank Indonesia approval before implementation.
- Conduct third-party risk assessments in accordance with Bank Indonesia (BI) requirements.
- Prepare and submit periodic risk profile reports and portfolio quality dashboards to the RMC, senior management, and the Board of Directors / President Director.
- Submit routine and incidental risk management reports to Bank Indonesia (BI), including TIKMI reporting, in accordance with applicable regulations.
- Monitor key risk indicators (KRIs) including TKB90, portfolio-at-risk, funding concentration ratios, and default rates, escalating breaches of risk appetite.
- Partner with Compliance to identify local regulatory requirements (e.g., OJK financing company regulations, Bank Indonesia (BI) regulations for payment service providers (PJP)) that should feed into the risk register and training needs.
- Act as the first point of contact for business and product teams on risk identification, scoring methodology, and treatment options for new initiatives.
- Coordinate with respective second-line stakeholders (e.g., Technology, Security, Financial Crime) to provide a holistic view of the risk landscape of the entity.
- Deliver risk management training and promote a strong risk culture throughout the business.
- Support effective coordination between local management, regional risk functions and group control functions.

Minimum Qualification(s)
- Bachelor's degree in Finance, Risk Management, Economics, Accounting, or a related field;
- 5+ years of experience in risk management, internal control, credit risk, or internal audit, ideally within a Payments P2P lending, multifinance, or fintech environment regulated by OJK/BI.
- Working knowledge of OJK regulations applicable to P2P lending (POJK 10/2022, POJK 40/2024, POJK 42/2024 and subsequent amendments), BI regulations applicable to PJP (PBI No. 10/2025 and PADG No. 32/2025), the AFPI Code of Conduct, and Indonesia's AML/CFT/CPF requirements for financial institutions.
- Fluency in Bahasa Indonesia and English (written and spoken).

Preferred Qualification(s)
- Strong quantitative and analytical skills; Comfortable working with credit and portfolio data (Excel/SQL/Python or BI tools).
- Sound understanding of enterprise risk management frameworks (risk identification, measurement, monitoring, reporting).
- Clear written and verbal communication for reporting to committees and senior management.
- Ability to work cross-functionally with product, credit, compliance, and technology teams.
- High attention to detail and sound judgement in a fast-moving, regulated fintech environment.
- Proactive, able to work independently while escalating issues appropriately.
- Holding an AFPI certification at the level one below Director (or equivalent) is an advantage.
- A professional risk certification (e.g., CRMP, FRM, CRP, CA) is an advantage.