Governance Risk Compliance

PT Bumi Amartha Teknologi Mandiri; Kemayoran; On-site; IDR 180,000,000 - 300,000,000; Full time

Job summary

PT Bumi Amartha Teknologi Mandiri (AMARTEK) seeks a dedicated IT Security Governance professional to join our Jakarta team. You will manage governance mappings, develop policies, and handle security-related assessment tickets to ensure policy compliance and audit readiness.

Collaborating with stakeholders, you will maintain documentation and support ISO activities and audits, contributing to secure and compliant operations across the organization.

Qualifications

• Bachelor's degree in Information Technology, Information Systems, Cybersecurity, or a related field.
• Minimum 2 years of experience in IT Security Governance, Information Security, Risk Management, or Compliance.
• Familiar with cybersecurity governance frameworks, security policies, procedures, and control mapping.
• Experience in ISO 27001 compliance, ISMS documentation, and audit preparation is preferred.
• Experienced in supporting internal and external audits, including preparing audit evidence and following up on audit findings.
• Familiar with security assessment processes, compliance reviews, and documentation management.

Responsibilities

• Manage and maintain security governance mapping documents based on applicable requirements, controls, and organizational standards.
• Develop and maintain cybersecurity policies, procedures, and governance-related documentation.
• Handle assessment tickets related to cybersecurity and governance requirements.
• Assess and validate incoming requests to ensure they comply with applicable security policies and requirements.
• Manage the approval process for security and governance-related requests and documentation.
• Coordinate and follow up on assessment tickets throughout the review and approval process.
• Support ISO-related activities, including preparation and coordination of required documentation and evidence.
• Support internal and external audit activities by preparing documentation, evidence, and required assessments.
• Coordinate with relevant stakeholders to ensure cybersecurity governance and audit requirements are properly addressed.
• Maintain documentation and evidence to support security governance, compliance, and audit readiness.

Skills

Communication

Analytical thinking

Documentation

Stakeholder coordination

Detail-oriented

Education

Bachelor's degree in Information Technology, Information Systems, Cybersecurity, or related field

Tools

Jira

Confluence

Microsoft Office

Microsoft Teams

Job description

• Manage and maintain security governance mapping documents based on applicable requirements, controls, and organizational standards.


• Develop and maintain cybersecurity policies, procedures, and governance-related documentation.


• Handle assessment tickets related to cybersecurity and governance requirements.


• Assess and validate incoming requests to ensure they comply with applicable security policies and requirements.


• Manage the approval process for security and governance-related requests and documentation.


• Coordinate and follow up on assessment tickets throughout the review and approval process.


• Support ISO-related activities, including preparation and coordination of required documentation and evidence.


• Support internal and external audit activities by preparing documentation, evidence, and required assessments.


• Coordinate with relevant stakeholders to ensure cybersecurity governance and audit requirements are properly addressed.


• Maintain documentation and evidence to support security governance, compliance, and audit readiness.

Job Description

• Manage and maintain security governance mapping documents based on applicable requirements, controls, and organizational standards.


• Develop and maintain cybersecurity policies, procedures, and governance-related documentation.


• Handle assessment tickets related to cybersecurity and governance requirements.


• Assess and validate incoming requests to ensure they comply with applicable security policies and requirements.


• Manage the approval process for security and governance-related requests and documentation.


• Coordinate and follow up on assessment tickets throughout the review and approval process.


• Support ISO-related activities, including preparation and coordination of required documentation and evidence.


• Support internal and external audit activities by preparing documentation, evidence, and required assessments.


• Coordinate with relevant stakeholders to ensure cybersecurity governance and audit requirements are properly addressed.


• Maintain documentation and evidence to support security governance, compliance, and audit readiness.

Minimum Qualifications

• Bachelor's degree in Information Technology, Information Systems, Cybersecurity, or a related field.


• Minimum 2 years of experience in IT Security Governance, Information Security, Risk Management, or Compliance.


• Familiar with cybersecurity governance frameworks, security policies, procedures, and control mapping.


• Experience in ISO 27001 compliance, ISMS documentation, and audit preparation is preferred.


• Experienced in supporting internal and external audits, including preparing audit evidence and following up on audit findings.


• Familiar with security assessment processes, compliance reviews, and documentation management.


• Proficient in Jira, Confluence, Microsoft Office, and Microsoft Teams.


• Strong communication, analytical thinking, documentation, and stakeholder coordination skills.


• Detail-oriented, organized, and able to manage multiple assessment requests and follow-up activities.

Bumi Amartha Teknologi Mandiri or "AMARTEK" was established to provide information technology solutions. Our mission from the very first day has been to cultivate professional relationships with our clients to provide effective and reliable information technology solutions for their needs. The team at "AMARTEK" is equipped with a highly developed skillset developed over decades of experience not only in information technology but also in business processes across a range of industry sectors. This business experience makes us uniquely positioned to offer solutions promising greater operational efficiency, productivity gains and cost savings for each of our clients, regardless of their industry.

As an established technology-intensive company, we pride ourselves on providing a comprehensive suite of solutions comprising of Infrastructure Consultancy, on/offsite services, Custom software and web development, Talent Augmentation, and enterprise architecture consulting. Our team consistently delivers state-of-the-art solutions in various areas including, but not limited to: integrated business solutions, system applications, product development and professional services.

At "AMARTEK", we guarantee rapid, reliable and robust information technology solutions that work.

Bumi Amartha Teknologi Mandiri or "AMARTEK" was established to provide information technology solutions. Our mission from the very first day has been to cultivate professional relationships with our clients to provide effective and reliable information technology solutions for their needs. The team at "AMARTEK" is equipped with a highly developed skillset developed over decades of experience not only in information technology but also in business processes across a range of industry sectors. This business experience makes us uniquely positioned to offer solutions promising greater operational efficiency, productivity gains and cost savings for each of our clients, regardless of their industry.

As an established technology-intensive company, we pride ourselves on providing a comprehensive suite of solutions comprising of Infrastructure Consultancy, on/offsite services, Custom software and web development, Talent Augmentation, and enterprise architecture consulting. Our team consistently delivers state-of-the-art solutions in various areas including, but not limited to: integrated business solutions, system applications, product development and professional services.

At "AMARTEK", we guarantee rapid, reliable and robust information technology solutions that work.