Identity IT GRC Manager — ISO 27001/27701 Readiness

GoTo Financial; Jakarta Utara; On-site; IDR 400,000,000 - 800,000,000; Full time

Job summary

GoTo Financial is seeking an IT GRC Manager to lead the design and deployment of a robust governance, risk and compliance framework for our identity services products. You will bridge policy and practice, monitor internal controls, and drive readiness for ISO 27001 and ISO 27701 certifications as well as regulatory audits.

In six months you will strengthen the risk posture, influence policy reforms, and build a resilient organization capable of withstanding evolving cyber threats.

Qualifications

• Minimum 5 years of experience in IT governance, risk management, and compliance.
• Strong experience with ISO 27001/ISO 27701, ITIL, and COBIT.
• Proven track record leading certifications such as ISO 27001 and ISO 27701.
• Excellent stakeholder management and ability to influence at all levels.
• Experience navigating regulatory audits.

Responsibilities

• Coordinating with the compliance team to ensure that every initiative, development, and collaboration complies with the standards and regulations (internal and external).
• Conduct routine evaluation of policies and procedures implementation and ensure best-practice risk mitigation and assessment functions are maintained to comply with the company's strategy.
• Act as a Subject Matter Expert to the stakeholders and provide relevant & applicable consultation for addressing the IT GRC requirement in lending & identity product & services.
• Ensure effective governance, risk management, and compliance across the organization.
• Develop and maintain compliance, governance, and risk-related IT and business process flow.
• Coordinate with related IT work units to follow up on data requests and internal audit findings, external audits, and regulators.
• Develop the process and conduct the activities to safeguard or archive every IT development document regularly.
• Implement a good governance organization using ISO27001, ISO 27701, and other relevant Technology & Security best practices.

Skills

IT governance

risk management

compliance

ISO 27001

ISO 27701

ITIL

COBIT

stakeholder management

regulatory audits

Job description

GoTo Financial is seeking an IT GRC Manager to lead the design and deployment of a robust governance, risk and compliance framework for our identity services products. You will bridge policy and practice, monitor internal controls, and drive readiness for ISO 27001 and ISO 27701 certifications as well as regulatory audits.

In six months you will strengthen the risk posture, influence policy reforms, and build a resilient organization capable of withstanding evolving cyber threats.