IT Audit Lead: Controls, Risk & Compliance Expert

PT Amartha Mikro Fintek; Jakarta Selatan; On-site; IDR 500,000,000 - 750,000,000; Full time

Job summary

Amartha is seeking an IT Audit Lead to help implement IT Internal Audit activities and strengthen controls across the organization. You will work with the internal audit team, risk division, and business units to improve process quality.

The role requires a degree in IT or related field, 6+ years of IT audit experience, ISMS/ISO27001 exposure, and certifications such as CISA or CRISC. Excellent communication and project management skills are essential.

Qualifications

• Degree in IT or related field from a reputable university.
• 6+ years of experience auditing IT controls and security.
• Experience with ISMS, ISO27001 reviews, cyber security, and regulatory compliance.
• Knowledge of COBIT, ITIL, TOGAF and ISO 31000 frameworks.
• Excellent written and verbal communication and project management skills.

Responsibilities

• Ensure IT Internal Audit plan is executed with adequate evidence and documentation.
• Collect and analyze data to detect anomalies, deficient controls, and non-compliance.
• Implement systems and procedures for IT audit processes.
• Identify root causes of audit issues and provide actionable recommendations.
• Prepare detailed audit working papers and IT audit reports.
• Monitor open issues and ensure follow-up on control implementations.
• Conduct advisory process improvements and maintain stakeholder relations.

Skills

IT audit

Root cause analysis

Data analysis

Communication

Project management

Initiative

Education

Bachelor's degree in Information Technology / Information Systems / Computer Science

CISA

CRISC

ISO27001 lead auditor/implementor

Job description

Amartha is seeking an IT Audit Lead to help implement IT Internal Audit activities and strengthen controls across the organization. You will work with the internal audit team, risk division, and business units to improve process quality.

The role requires a degree in IT or related field, 6+ years of IT audit experience, ISMS/ISO27001 exposure, and certifications such as CISA or CRISC. Excellent communication and project management skills are essential.