Hanifah A. Sosrokoesoemo

Mission: to enable Krom’s sustainable growth through strong risk management. • Lead enterprise-wide risk management for a regulated financial institution, covering lending, liquidity, capital, operational, technology, anti fraud (all eight bank risks) as well as climate and ESG. • Designed the Bank’s ERM framework from scratch, including governance, Risk Appetite Framework (RAF), risk limits, stress indicators, and Board/Committee reporting. • Serve as senior risk advisor to Management and Board Committees, providing independent views on exposures, mitigations, regulatory implications, and risk-adjusted decision-making across products, funding, and technology initiatives. • Led enterprise risk assessments, scenario analysis, and stress testing across credit, liquidity, and capital, translating downside scenarios into management actions and governance decisions. • Integrated ESG and climate risks into ERM and credit processes; led ESG disclosures including Scope 1–3 GHG accounting (GHG Protocol) and supported management on climate transition and sustainability risks. • Led ICOFR implementation, including control mapping, design and effectiveness testing, remediation tracking, and coordination with Finance and Internal Audit. • Partnered with Finance and Treasury on liquidity governance, funding resilience, stress scenarios, and capital planning to support balance sheet strategy. • Built and led a 24-person multidisciplinary Risk team (credit, operational, technology, governance, anti-fraud), strengthening risk culture and execution discipline.

Mission: make Jago, one of the premier challenger banks in Indonesia, safe and secure; keeping risk levels below the Bank's appetite. Accomplishments: • Second hire to build the business risk function. Implemented anti-fraud prevention and security features, such as 2-FactorAuthentication, mobile device fingerprinting, risk-based customer scoring, and risk-based device blacklisting; through a cross-clan project with Product Owners, Tech Leads, and Operation Managers. • Revamped outdated fraud engines and devised new rules-based detection mechanisms, incorporating machine learning (ML) models for enhanced scalability. The FP rate consistently remained below 5% every month for financial and non-financial transactions. • Directed collaborative initiatives with the Growth and Marketing team that yielded cost-saving benefits by preemptively blocking promotion abusers via a probabilistic risk scoring model. Additionally, influenced the implementation of efficient operational support to handle alerts and appeals, achieving an impressive 90% SLA.

Mission: minimise risk exposures towards SeaMoney portfolio in Indonesia. Accomplishments: • Led a 15-person team and implemented a strategic approach that reduced fraud rate from 20-30% of overall transactions per month to a remarkable 3-5%. This achievement was realised through an aggressive re-formulation of key processes and policies, involving comprehensive improvements in the onboarding process and proactive detection of fraudulent activities, including fake merchants, fake transactions, incentive abuse, and various forms of cyber-fraud, such as device spoofing and fake GPS. • Established a streamlined asset recovery process, effectively recovering +5-10% of total disbursements per month through a systematic clawback process targeting identified and confirmed fraud. • Spearheaded the regulatory compliance efforts, successfully obtaining approvals, and implementing a robust framework for conducting product risk assessments for both the issuing business (consumer) and acquiring (merchant) sides.

Mission: ensure Gopay remains the most trustworthy e-wallets in Indonesia. Accomplishments: • Initiated and led a team of risk managers in evangelising risk best practices, such as implementing a risk self-assessment matrix, cascading risk Objectives and Key Results (OKRs) throughout the organisation, and establishing committee meetings to address and resolve critical matters together with business leaders and Board of Directors. • Launched Money Back Guarantee programme as one of the flagship initiatives to ensure Gopay remains in people's mind as a trustworthy payment channel. • Championed the business risk function that led to an outstanding ~70% reduction in operational losses compared to previous levels. This achievement was accomplished by instituting a robust risk assessment process before product or feature launches.

Mission: make Gopay a safe, secure, and regulatory-compliant payment provider. Accomplishments: • Solved a rampant fraudulent registrations by leveraging detection logic and business process improvements. As a result, the fraud rate plummeted to inconsequential figure within two months. • Pioneered a loan-whitelisting initiative, offering cash loans ranging from IDR 500k-1m to high-scoring drivers, leveraging their behavioural signals as a basis for eligibility. • Achieved negligible regulatory audit findings related to Gopay and its businesses. Later assumed the role of Acting Group Head of Risk in securing the ISO-27001 Information Security license to support the successful launch of the Gojek PayLater product.

Mission: create value through ~£0.5 million fund allocated by the UK government to Indonesia. Accomplishments: • Forged a partnership with the Corruption Eradication Commission (KPK), bolstering anti-corruption and anti-graft regulatory frameworks, and positioning Indonesia as an observer in the esteemed Financial Action Task Force, amplifying the nation's global competitiveness. • Championed the advocacy for a state regulation that streamlined business prerequisites, resulting in a 30% reduction in operational costs for businesses operating in Indonesia (survey-based). • Collaborated with global organisations like the Maritime Anti-Corruption Network (MACN) and local NGO Kemitraan, successfully eliminating industry-specific barriers and fostering a more conducive business environment.

Mission: solve the client's problems. Accomplishments: • Led and conducted large-scale fraud investigations at a global manufacturing company, resulting in the successful detection and mitigation of fraudulent activities, safeguarding the company's assets and reputation. • Spearheaded a forensic examination in a publicly scrutinised legal case, which led to the successful discovery and preservation of primary incriminating evidence pivotal in resolving the case. • Served as a savvy consultant to a major conglomerate, strategically evaluating candidates for their future investments through a meticulous due diligence lens.