We are Honest, a company committed to building financial products that people truly love. Our products are designed to be fair, simple, and genuinely useful in everyday life. Our diverse team brings together people from different backgrounds who share the same goal: to create meaningful solutions that make finance better. After successfully launching our first product, we're now in an exciting growth stage, learning fast, moving quickly, and building together as a team.
About the role:
As Head of Internal Audit, you will lead Honest's internal audit function as our third line of defence, providing independent and objective assurance to the Board of Directors and Board of Commissioners over the adequacy and effectiveness of governance, risk management, and internal control. You will own the annual risk-based audit plan, ensure the function operates in line with OJK and Bank Indonesia requirements, ISO/IEC 27001:2022, and professional internal audit standards, and drive management action on audit findings. You'll also build and develop the audit team as we scale.
How you will make an impact:
Audit planning and risk assessment
- Lead the annual internal audit risk assessment and enterprise risk assessment, and develop a risk-based audit plan aligned to the organisation's risk profile
- Obtain senior management's (Board of Directors, Board of Commissioners, Audit Committee) approval of the audit plan and report periodically on its execution
- Identify the organisation's key risk areas from audit findings and develop corresponding action and risk mitigation plans
Audit execution and reporting
- Oversee execution of all audits defined in the audit plan, including but not limited to business, operations, IT, AML/CFT, consumer protection, and regulatory compliance
- Review audit findings and finalise audit reports that are clear, concise, identify root causes, and provide practical, value-adding recommendations
- Monitor and follow up on management's implementation of agreed corrective actions until risks are effectively mitigated
- Lead special audits as required, including investigation audits, fraud audits, whistleblower cases, and ad hoc assignments
Regulatory and governance
- Ensure the internal audit function complies with OJK and Bank Indonesia requirements, including the internal audit charter, the annual audit plan, and mandatory periodic reporting to the regulator
- Plan and lead internal audits of the Information Security Management System against ISO/IEC 27001:2022, coordinate surveillance and recertification audits with the external certification body, and track closure of nonconformities and corrective actions
- Prepare and submit internal audit reporting to OJK within the prescribed timelines, and support regulatory examinations and external audits
- Report audit results and significant issues to the President Director and Board of Commissioners, and present to the Audit Committee where applicable
- Create, update, and maintain internal audit policies, procedures, methodology, and working-paper documentation
Leadership and capability
- Lead, coach, and develop the internal audit team, and manage resourcing and co-sourcing arrangements where required
- Ensure audit work is performed in accordance with established professional standards, and keep the function current with emerging trends and better practice
- Provide subject-matter expertise and advisory input to the business without compromising audit independence
What you need to have:
- Bachelor's degree in Accounting, Finance, Management, Information Systems, or a related field
- Minimum 8 years of experience in internal audit, external audit, or risk assurance, including at least 3 years in a leadership or team-lead capacity
- Experience in a financial institution regulated by OJK and Bank Indonesia — financing company (multifinance), bank, fintech, or credit card issuer
- Strong working knowledge of OJK regulations applicable to the PVML sector, including requirements on internal audit, governance, risk management, and AML/CFT
- Proven experience developing risk-based audit plans and leading audits end-to-end, from planning through reporting and follow-up
- Experience with regulatory reporting to OJK and supporting regulatory examinations
- Strong analytical, investigative, and root-cause analysis skills, with excellent report-writing ability
- High integrity, sound judgement, and the independence to raise difficult issues with senior management and the Board
- Excellent communication skills in English and Bahasa Indonesia
What makes you stand out:
- Audit-related certifications such as CIA, CISA, CFE, CPA, CA, or QIA
- ISO/IEC 27001:2022 Lead Auditor or Internal Auditor certification
- Experience auditing IT and cyber security controls in a regulated financial institution
- Experience establishing or transforming an internal audit function in a fast-scaling organisation
- Familiarity with data analytics tools applied to audit testing
Why you'll love it here:
- We're all owners; everyone at Honest gets ESOP (Employee Stock Option Plan)
- Training course and book subsidies
- You’ll be working with the smartest people in the industry
At Honest, we’re working hard to build the future of finance for Asia. To do so, we prioritize attracting the best talent worldwide to join us – regardless of their background and heritage. At Honest, we are committed to equal employment opportunities regardless of race, color, ethnicity, ancestry, religion, national origin, gender, sex, gender identity or expression, sexual orientation, age, citizenship, marital or parental status, disability, or other class protected by applicable law. We are proud to be an equal opportunity workplace. If you want to be part of changing how people access finance in Asia, join us and help us build a global company where we’re all proud to belong.