Identity IT GRC Manager — ISO 27001/27701 Lead

GoPay; Jakarta Pusat; Hybrid; IDR 450,000,000 - 650,000,000; Full time

Job summary

GoTo Group is seeking an IT GRC Manager to lead the governance, risk, and compliance framework across lending and identity services. You will drive ISO 27001 and ISO 27701 initiatives, bridging policy and execution, and prepare the organization for regulatory audits.

In the first six months, strengthen risk posture, influence policy reforms, and advance resilience against evolving cyber threats while coordinating with compliance teams and internal stakeholders.

Qualifications

• Minimum of 5 years of experience in IT governance, risk management, and compliance.
• Experience with PSrE, ISO 27001, ISO 27701, ITIL, and COBIT preferred.
• Proven track record leading certifications such as ISO 27001 and ISO 27701.

Responsibilities

• Coordinate with compliance to ensure initiatives meet standards and regulations.
• Evaluate policies and procedures for risk mitigation and regulatory alignment.
• Serve as SME to stakeholders for IT GRC in lending and identity products/services.
• Ensure governance, risk management, and compliance across the organization.
• Develop and maintain IT and business process flow for compliance and governance.
• Track data requests, audits, and regulator inquiries; close findings.

Skills

IT GRC

ISO 27001

ISO 27701

ITIL

COBIT

Job description

GoTo Group is seeking an IT GRC Manager to lead the governance, risk, and compliance framework across lending and identity services. You will drive ISO 27001 and ISO 27701 initiatives, bridging policy and execution, and prepare the organization for regulatory audits.

In the first six months, strengthen risk posture, influence policy reforms, and advance resilience against evolving cyber threats while coordinating with compliance teams and internal stakeholders.