Assistant IT Audit Manager

Krom; Jakarta Pusat; On-site; IDR 334,800,000 - 669,600,000; Full time

Job summary

Krom in Jakarta is seeking an Assistant IT Audit Manager to develop and execute a risk-based annual IT audit plan covering IT infrastructure, applications, cybersecurity, and other technology processes. You will lead IT audits including ITGC, ITAC, and cybersecurity assessments, and supervise the IT Audit team to deliver high-quality engagements.

The role requires strong knowledge of IT governance and control frameworks (COBIT, ISO 27001, NIST), familiarity with POJK and BI regulations, plus 3–5

Qualifications

• Bachelor degree in CS/IS/IT or related field required.
• CISA or equivalent IT Audit/Security certification preferred.
• Strong knowledge of IT governance and control frameworks.
• Familiarity with POJK and BI regulatory requirements.
• Excellent analytical, communication, and presentation skills.

Responsibilities

• Develop and execute a risk-based annual IT audit plan.
• Lead IT audits: ITGC, ITAC, cybersecurity assessments.
• Evaluate IT governance, change management, access, backup, and DR.
• Supervise IT Audit team and deliver high-quality engagements.
• Monitor timelines, resources, and annual audit budget.
• Prepare clear audit reports with actionable recommendations.
• Follow up on findings and assess corrective actions.
• Collaborate with IT, business units, regulators, and auditors.
• Stay updated on technology trends, risks, and standards.

Skills

Analytical skills

Communication skills

Presentation skills

Leadership

Education

Bachelor's degree in Computer Science, Information Systems, Information Technology, or related field

CISA

ISO/IEC 27001 Lead Auditor

Tools

COBIT

ISO/IEC 27001

ITIL

NIST

Job description

As an Assistant IT Audit Manager, you will:

• Develop and execute a risk-based annual IT audit plan covering IT infrastructure, applications, cybersecurity, and other technology processes.


• Lead IT audits, including IT General Controls (ITGC), IT Application Controls (ITAC), and cybersecurity assessments.


• Evaluate IT governance, system development and change management, user access management, backup, and disaster recovery processes.


• Supervise and coach the IT Audit team to deliver high-quality audit engagements and continuous improvement.


• Monitor audit project timelines, resource utilization, and annual audit budget execution.


• Prepare clear and impactful audit reports with practical recommendations to strengthen internal controls and improve IT effectiveness.


• Follow up on audit findings and assess the effectiveness of corrective actions.


• Collaborate with IT, business units, external auditors, and regulators throughout audit engagements.


• Stay up to date with emerging technology trends, cybersecurity risks, and regulatory developments to provide strategic insights to management.


• Ensure audit activities are conducted in accordance with Internal Audit Standards and recognized frameworks such as COBIT, ISO 27001, NIST, and other relevant standards.

About You:

We're looking for someone who has:

• Bachelor's degree in Computer Science, Information Systems, Information Technology, or a related field.


• Professional certifications such as CISA, ISO/IEC 2701 Lead Auditor, or other relevant IT Audit/Security certifications.


• Strong knowledge of IT governance and control frameworks, including COBIT, ISO 27001, ITIL, NIST, and related standards.


• Good understanding of IT regulations and data protection requirements, including POJK, Bank Indonesia regulations (PBI), the Personal Data Protection Law (UU PDP), and other applicable industry standards.


• Strong analytical, communication, and presentation skills with the ability to communicate audit findings to senior stakeholders.


• Experience identifying technology risks, particularly within digital banking or financial services, and providing practical, risk-based recommendations.


• Minimum 3–5 years of experience in IT Audit, Information Security, IT Governance, or related fields.


• At least 1 year of experience leading IT audit teams or managing audit engagements is highly preferred.


• Experience in digital banking and/or fintech companies will be a strong advantage.