Head of Technology Risk, IT & Cybersecurity Audit

Tap Growth ai; Indonesia; On-site; IDR 400.000.000 - 450.000.000; Full time

Job summary

A technology firm in Indonesia is seeking a Senior Audit Leader to oversee technology and cybersecurity audit functions. This role involves leading audits, assessing risks, and providing actionable recommendations to improve digital governance and resilience. A Bachelor's degree in IT or a related field and 8-12 years of experience in IT audit or technology risk management are required. The successful candidate will also communicate findings to senior leadership and engage with external auditors. Strong analytical and organizational skills are essential.

Qualifications

• Minimum 8-12 years of experience in IT audit or technology risk roles.
• Strong knowledge of IT infrastructure and cybersecurity controls.
• Proven experience leading technology audit programs.

Responsibilities

• Lead technology, IT, and cybersecurity audits across the organization.
• Assess technology-related risks including cybersecurity threats.
• Guide and review audit teams for professional standards compliance.

Skills

IT audit

Cybersecurity

Risk management

Stakeholder management

Analytical skills

Education

Bachelor’s degree in Information Technology or related field

Tools

CISA

CIA

CISSP

CRISC

Job description

About The Role

We are seeking a senior audit leader to oversee technology, IT, and cybersecurity audit functions across the organization. This role is critical in strengthening digital governance, safeguarding data integrity, and ensuring that technology and operational risks are proactively identified, assessed, and mitigated. You will act as a trusted advisor to senior leadership and audit committees, providing independent assurance over IT infrastructure, network security, systems, and technology-enabled business processes—while continuously enhancing the organization’s technology risk management framework.

Key Responsibilities

• Lead and govern end-to-end technology, IT, network, and cybersecurity audits across infrastructure, applications, and digital platforms.


• Assess technology-related risks including cybersecurity threats, access control weaknesses, data integrity risks, and operational vulnerabilities.


• Develop and execute annual and multi-year technology audit plans aligned with enterprise risk priorities and regulatory requirements.


• Guide and review audit teams to ensure audits are executed in line with professional standards and industry best practices.


• Evaluate the effectiveness of IT controls, security architectures, and digital governance frameworks.


• Provide clear, actionable recommendations to strengthen system security, resilience, compliance, and operational effectiveness.


• Present audit findings, risk assessments, and strategic insights to senior management and audit committees.


• Coordinate with external auditors, regulators, and technology experts to ensure comprehensive audit coverage and regulatory alignment.

Key Deliverables

• Comprehensive technology and IT audit reports with clear findings, risk ratings, and remediation recommendations.


• Enterprise-level assessments of cybersecurity, access control, and technology operational risks.


• Annual technology audit plans aligned with evolving risk landscapes and regulatory expectations.


• Practical improvement roadmaps to enhance digital governance, system security, and technology resilience.

Requirements

• Bachelor’s degree in Information Technology, Computer Science, Telecommunications, or a related discipline.


• Minimum 8–12 years of experience in IT audit, technology risk, cybersecurity, or technology operations roles, preferably within complex or regulated environments.


• Strong knowledge of IT infrastructure, networks, systems architecture, and cybersecurity controls.


• Proven experience leading technology audit programs and managing audit teams.


• Solid understanding of technology risk management, internal control frameworks, and regulatory compliance.


• Professional certifications such as CISA or CIA are strongly preferred; additional certifications (e.g., CISSP, CRISC) are a strong advantage.


• Excellent analytical, problem-solving, and risk assessment capabilities.


• Strong communication and stakeholder management skills, with experience presenting to senior leadership or audit committees.

Preferred Experience

• Exposure to telecommunications, digital platforms, or large-scale technology environments.


• Experience working with regulators and external auditors on technology-related compliance matters.


• Familiarity with emerging risks such as cloud security, third-party risk, and data privacy.