GRC & IT Security Lead – ISO 27001, GDPR/NIST

PT GTech Digital Asia; Tangerang; On-site; IDR 300,000,000 - 600,000,000; Full time

Job summary

PT GTech Digital Asia is seeking an IT Risk and Compliance Senior Officer to support, execute, and continuously improve IT governance, risk, and compliance activities. The role emphasizes hands-on implementation, audit support for ISO/IEC 27001, and GDPR/PDP/NIST compliance within a technology-focused organization.

The position requires strong knowledge of IT governance, risk assessment, and policy development, with collaboration across IT, Security, PMO, and Legal to embed robust controls

Qualifications

• Strong knowledge of IT Governance, IT Controls, and Information Security Controls.
• Hands-on understanding of ISO/IEC 27001 (Clauses & Annex A), GDPR/PDP Regulation, NIST CSF / NIST SP 800.
• Experience in control design, control implementation, and control effectiveness assessment.
• Skilled in risk assessment, risk register management, and risk treatment tracking.
• High attention to detail with strong documentation, evidence management, and audit support skills.
• Experience in developing and maintaining policies, standards, procedures, and guidelines.
• Ability to translate regulatory and security standards into operational and technical controls.
• Familiar with secure-by-design and privacy-by-design principles.
• Experience supporting project governance, SDLC controls, and compliance checkpoints.
• Exposure to Change Control Board (CCB) and Design Review Board (DRB) processes.
• Strong stakeholder communication and coordination across IT, Security, Engineering, PMO, and Legal.
• Ability to prepare compliance reports, risk summaries, and management documentation.
• Self-motivated, able to work independently with minimal supervision.

Responsibilities

• Support, execute, and continuously improve IT GRC activities.
• Oversee audit support for ISO/IEC 27001 and compliance with GDPR/PDP and NIST.
• Embed governance and security controls across project delivery, change management, and design reviews.
• Contribute to policy lifecycle and control design within a technology-focused organization.
• Collaborate with IT, Security, Engineering, PMO, and Legal stakeholders.
• Prepare compliance reports and risk summaries for management.

Skills

IT Governance

IT Controls

ISO/IEC 27001

GDPR PDP

NIST CSF

Risk assessment

Audit support

Policy development

Regulatory translation

Stakeholder communication

Control design

SDLC controls

Job description

PT GTech Digital Asia is seeking an IT Risk and Compliance Senior Officer to support, execute, and continuously improve IT governance, risk, and compliance activities. The role emphasizes hands-on implementation, audit support for ISO/IEC 27001, and GDPR/PDP/NIST compliance within a technology-focused organization.

The position requires strong knowledge of IT governance, risk assessment, and policy development, with collaboration across IT, Security, PMO, and Legal to embed robust controls