Identity IT GRC Lead for ISO 27001/27701

GoTo Group; Jakarta Pusat; On-site; IDR 600,000,000 - 1,000,000,000; Full time

Job summary

GoTo Group is seeking an IT GRC Manager to lead the development and implementation of a robust governance, risk, and compliance framework for our identity services products. You will bridge the gap between policy and practice, monitor internal controls, and drive ISO 27001 and ISO 27701 readiness for audits.

Within six months, fortify the company’s risk posture, influence IT policy reforms, and enhance resilience against evolving cyber threats while coordinating with compliance, legal, and

Qualifications

• Minimum 5 years in IT governance, risk management and compliance.
• Extensive experience with ISO 27001, ISO 27701, ITIL and COBIT.
• Track record leading and achieving ISO27001/27701 certifications.
• Strong stakeholder management and ability to influence at all levels.
• Proven ability to deliver results with limited resources and supervision.
• Experience handling regulatory audits and industry standards compliance.
• Leadership skills to guide a small GRC team.
• Certifications: CISA, CISM, CRISC, ITIL, COBIT; ISO 27001 LA is preferred.

Responsibilities

• Coordinating with the compliance team to ensure that every initiative, development, and collaboration complies with the standards and regulations (internal and external).
• Conduct routine evaluation of policies and procedures implementation and ensure best-practice risk mitigation and assessment functions are maintained to comply with the company's strategy.
• Act as a Subject Matter Expert to the stakeholders and provide relevant & applicable consultation for addressing the IT GRC requirement in lending & identity product & services.
• Ensure effective governance, risk management, and compliance across the organization.
• Develop and maintain compliance, governance, and risk-related IT and business process flow.
• Coordinate with related IT work units to follow up on data requests and internal audit findings, external audits, and regulators.
• Develop the process and conduct the activities to safeguard or archive every IT development document regularly.
• Implement a good governance organization using ISO27001, ISO 27701, and other relevant Technology & Security best practices.

Skills

IT GRC

ISO 27001

ISO 27701

ITIL

COBIT

Stakeholder mgmt

Job description

GoTo Group is seeking an IT GRC Manager to lead the development and implementation of a robust governance, risk, and compliance framework for our identity services products. You will bridge the gap between policy and practice, monitor internal controls, and drive ISO 27001 and ISO 27701 readiness for audits.

Within six months, fortify the company’s risk posture, influence IT policy reforms, and enhance resilience against evolving cyber threats while coordinating with compliance, legal, and