Risk Management & Data Protection Officer

Triv is one of the largest and oldest cryptocurrency exchanges in Indonesia, established in 2015.

We’re seeking a detail-oriented and proactive Risk Management and Data Protection Officer to join our South Jakarta office. In this role, you’ll identify, assess, and mitigate organizational risks while supporting the implementation of data protection practices and internal controls to ensure a secure and resilient operating environment.

We offer competitive compensation and attractive benefits for our passionate and hardworking team!

Responsibilities:

• Identify, assess, and monitor operational, compliance, information technology, data security, fraud, and risks related to cryptocurrency products and services.

• Conduct periodic and ad hoc risk assessments, including preparing and updating the risk register, as well as evaluating inherent risk, residual risk, likelihood, impact, existing controls, and mitigation plans.

• Develop and implement policies, Standard Operating Procedures (SOPs), and internal controls related to Risk Management, Data Protection, Compliance, APU PPT PPPSPM, Information Security, and Corporate Governance.

• Implement and monitor APU PPT PPPSPM, including CDD, EDD, Transaction Monitoring, and Alert Transaction investigations.

• Analyze and escalate unusual transactions, suspicious transactions, red flags, transaction anomalies, or customer activities that are inconsistent with their risk profile.

• Collaborate with cross-functional teams to ensure the implementation of Risk Management, Compliance, and Data Protection across business processes and product development.

• Ensure compliance with applicable regulations and prepare risk and compliance reports for management and regulatory authorities.

Qualifications:

• Bachelor's degree in Law, Management, Accounting, Finance, Information Systems, Computer Science, or a related field.

• Minimum 2 years of experience in Risk Management, APU PPT, Compliance, Internal Control, Data Protection, Information Security, or a related role.

• Strong understanding of Enterprise Risk Management (ERM), Risk Assessment, Risk Register, Risk Matrix, Risk Mitigation Plan, APU PPT PPPSPM, CDD, EDD, Transaction Monitoring, Red Flags, and Alert Transaction.

• Strong understanding of OJK regulations, corporate governance, risk management principles, and data protection practices.

• Strong analytical, investigative, problem-solving, and communication skills.

• Ability to work independently while collaborating effectively with cross-functional teams.

• Experience in the cryptocurrency, fintech, investment, or banking industry is an advantage.

• Knowledge of and experience with ISO/IEC 27001:2022 is an advantage.

If you’re passionate about risk management and data protection, and are committed to building a secure and well-governed organization, we’d love to hear from you!