Director of Legal, Risk, and Compliance – BNPL Fintech

About the Company
Our client is a growing financial technology business preparing to launch its Buy-Now-Pay-Later operations in Indonesia. As the business establishes its local presence and regulatory framework, the company is building a lean leadership team with direct ownership across legal, compliance, risk, and regulatory functions. The role will be central to establishing a compliant and sustainable operating platform and maintaining effective engagement with OJK throughout the company's licensing and operational lifecycle.

About the Role
Our client is looking for a Director of Legal, Risk & Compliance to establish and lead its regulatory, legal, compliance, AML-CFT, and risk management functions. This is a senior, hands-on leadership position responsible for the company’s OJK-facing activities, regulatory reporting, risk framework, legal matters, and compliance governance. The role will work closely with the BoD, providing clear and practical advice on regulatory risks before key business decisions are made, while building the required frameworks and controls for a newly established financial services operation.

Key Responsibilities

• Advise the Board of Directors on legal, regulatory, compliance, and risk matters, translating complex requirements into practical recommendations before business decisions are made.
• Build and maintain the compliance framework for the BNPL operation, including policies, procedures, monitoring mechanisms, and supporting evidence to demonstrate ongoing compliance.
• Develop and oversee the AML/CFT programme end-to-end, covering customer due diligence, sanctions and PEP screening, suspicious transaction reporting, and periodic AML risk assessments.
• Lead the company's regulatory engagement with OJK, including acting as the designated contact for supervision, responding to regulatory requests, and supporting ongoing licensing and supervisory requirements.
• Manage legal matters and commercial agreements with regulators and financial institution partners, merchants, vendors, and other counterparties, coordinating with external counsel where required.
• Prepare, review, and sign regulatory submissions and reporting to OJK, including the annual governance report, risk profile report, and other regulatory or ad hoc submissions arising from the company's licence.
• Stand up and oversee the risk management framework required for the business, covering strategic, operational, cyber, legal, compliance, and reputational risks, and chair the relevant risk forum.
• Supervise the contracted Data Protection Officer and oversee the company's data protection compliance and position under Indonesia's personal data protection framework.

Key Requirements

• Able to demonstrate strong integrity, sound financial reputation, and the competence required to successfully complete OJK's fit and proper assessment.
• Experienced in building and managing CFT/AML programmes, including customer due diligence, sanctions and PEP screening, suspicious transaction reporting, and risk assessments.
• Indonesian national with the ability to meet applicable regulatory requirements for holding a compliance function within an OJK-supervised institution.
• Minimum 10 years of relevant experience in legal, compliance, or risk functions within an OJK-supervised institution, such as banking, multifinance, P2P lending, payment services, or ITSK.
• Proven experience personally handling OJK licensing submissions, regulatory inspections, or supervisory cycles; practical regulatory exposure is more important than title seniority.
• Strong understanding of Indonesia's financial services regulatory environment, with working knowledge of the ITSK and relevant OJK regulations, including the ability to quickly interpret and implement new regulatory requirements.
• Strong commercial and legal capability with experience reviewing and negotiating contracts, managing external counsel, and providing practical legal advice within a regulated financial services environment.
• Willingness and availability to operate as a hands-on senior leader within a lean organization, with no concurrent position at another for-profit entity and the ability to attend OJK engagements in person when required.

If this opportunity aligns with your background and aspirations, we would be delighted to hear from you. You may apply through the company’s website or send your updated CV directly to [email protected] for a confidential discussion.