GRC Specialist: Security Governance & Compliance

PT Bumi Amartha Teknologi Mandiri; Kemayoran; On-site; IDR 180,000,000 - 300,000,000; Full time

Job summary

PT Bumi Amartha Teknologi Mandiri (AMARTEK) seeks a dedicated IT Security Governance professional to join our Jakarta team. You will manage governance mappings, develop policies, and handle security-related assessment tickets to ensure policy compliance and audit readiness.

Collaborating with stakeholders, you will maintain documentation and support ISO activities and audits, contributing to secure and compliant operations across the organization.

Qualifications

• Bachelor's degree in Information Technology, Information Systems, Cybersecurity, or a related field.
• Minimum 2 years of experience in IT Security Governance, Information Security, Risk Management, or Compliance.
• Familiar with cybersecurity governance frameworks, security policies, procedures, and control mapping.
• Experience in ISO 27001 compliance, ISMS documentation, and audit preparation is preferred.
• Experienced in supporting internal and external audits, including preparing audit evidence and following up on audit findings.
• Familiar with security assessment processes, compliance reviews, and documentation management.

Responsibilities

• Manage and maintain security governance mapping documents based on applicable requirements, controls, and organizational standards.
• Develop and maintain cybersecurity policies, procedures, and governance-related documentation.
• Handle assessment tickets related to cybersecurity and governance requirements.
• Assess and validate incoming requests to ensure they comply with applicable security policies and requirements.
• Manage the approval process for security and governance-related requests and documentation.
• Coordinate and follow up on assessment tickets throughout the review and approval process.
• Support ISO-related activities, including preparation and coordination of required documentation and evidence.
• Support internal and external audit activities by preparing documentation, evidence, and required assessments.
• Coordinate with relevant stakeholders to ensure cybersecurity governance and audit requirements are properly addressed.
• Maintain documentation and evidence to support security governance, compliance, and audit readiness.

Skills

Communication

Analytical thinking

Documentation

Stakeholder coordination

Detail-oriented

Education

Bachelor's degree in Information Technology, Information Systems, Cybersecurity, or related field

Tools

Jira

Confluence

Microsoft Office

Microsoft Teams

Job description

PT Bumi Amartha Teknologi Mandiri (AMARTEK) seeks a dedicated IT Security Governance professional to join our Jakarta team. You will manage governance mappings, develop policies, and handle security-related assessment tickets to ensure policy compliance and audit readiness.

Collaborating with stakeholders, you will maintain documentation and support ISO activities and audits, contributing to secure and compliant operations across the organization.