ICT Auditor

Kompas Gramedia; Jakarta Pusat; On-site; IDR 300,000,000 - 520,000,000; Full time

Job summary

BSI Group Indonesia invites applications for ICT Auditor (Client Manager). You will plan and conduct assessments against audit criteria, prepare reports, and coordinate certification decisions.

The role requires a Bachelor's in information technology, at least 4 years IT experience, and 2+ years in information security or IT service management, with ISO 27001 / ISO 20000 experience. Strong communication and problem-solving skills are essential.

Qualifications

• Bachelor’s degree in information technology or equivalent from a reputable institution.
• At least 4 years of full-time IT workplace experience across industries.
• At least 2 years in information security and/or IT service management.
• 1+ year implementing/auditing the ISO 27001 and/or ISO 20000-1 systems.
• Solid knowledge of information security / IT risk management.
• Familiarity with relevant information security laws and regulations.
• Current broad knowledge in IT (cloud, agile, PII protection, etc.).
• Preferred: CQI/IRCA Lead Auditor certifications and/or ISACA certifications.

Responsibilities

• Plan and conduct assessments of clients' management systems against audit criteria.
• Prepare assessment reports and related documents; submit and follow up on certification decisions.
• If qualified as a Tutor, administer courses and exams per accreditation requirements.
• Maintain assessor/tutor qualifications and participate in calibration meetings.
• Support sales activities and contribute to sector marketing campaigns and audit scoping.
• Assist commercial teams in audit duration estimation and technical discussions.
• Safeguard confidential data/information and act as a BSI Brand Ambassador.

Skills

Information security

IT risk management

ISO 27001

IT service management

Communication skills

Analytical thinking

Report writing

Working under pressure

Education

Bachelor's degree in information technology

CQI/IRCA ISO/IEC 27001 Lead Auditor Certification (PR320/PR367)

ISACA CISA / CISM

(ISC)2 CISSP / EC-COUNCIL CEH

Job description

Great that you're thinking about a career with BSI!

As our ICT Auditor (Client Manager), you will be tasked with :

• Planning and conducting assessment to the client’s management system against the defined audit criteria, preparing assessment report and other related documents, and submitting the report and following up the certification decision recommendation according to the BSI policy and procedure as well as the respective accreditation and regulatory requirements within the specified time-frame.

• If qualified as a Tutor, performing course according to the defined syllabus and accreditation requirements (for accredited course), administering the exam (if any), and completing all required course administration.

• Maintaining the existing assessor / tutor qualification, completing the planned resources development program, and joining actively the sector’s calibration meeting.

• Supporting the sales driving program and activities related to sector’s marketing campaign as well as assisting the commercial team as needed in audit duration estimation and any other technical issues for sales proposal preparation and joining sales meeting for technical discussion with the client.

• Supporting any other activities as assigned by the sector manager which relevant with sector team needs and BSI Group Indonesia management direction.

• Safeguarding company’s and client’s confidential data/information.

• Acting as a BSI Brand Ambassador for BSI.

#ICTAuditor #informationsecurity

In order to qualify for this role, you must have :

• Bachelor’s degree in information technology related majors or equivalent from reputable institution.

• At least 4 (four) years full time practical workplace experience in information technology in various industry.

• At least 2 (two) years in a role or function relating to information security and/or IT service management.

• At least 1 (one) year in implementing / auditing / consulting the information security management system based on ISO 27001 standard and/or IT service management system based on ISO 20000-1 standard.

• Have good knowledge in information security / IT risk management.

• Familiar with laws and regulations relevant with information security / IT.

• Have current broad knowledge and skills in information security / IT e.g. cloud computing, agile software development, PII protection, etc.

• Preferably have passed the CQI and IRCA Certified ISO/IEC 27001 Lead Auditor Course (PR320) and/or CQI and IRCA Certified ISO/IEC 27001 Lead Auditor Course (PR367).

• Having IT professional certification such as ISACA CISA / ISACA CISM / (ISC)2 CISSP / EC-COUNCIL CEH will be an advantage.

• Excellent communication, presentation and interpersonal skills with ability to deal with people at all professional level.

• Strong logical thinking, analytical and problem-solving skills.

• Ability to work effectively with minimum supervision and under pressure.

• With a keen interest to learn and explore new knowledge and skills.

• A good command of English both verbal and written including ability to write clear and concise reports in English.

Our Excellence Behaviours: Client-centric, Agile, Collaborative. These three behaviours represent how we do things at BSI. They help us ensure that BSI is a great place to work and a highly successful business.