IT Audit Lead — Controls & Risk Excellence

Amartha Financial; Jakarta Pusat; On-site; IDR 420,000,000 - 640,000,000; Full time

Job summary

Amartha is seeking an IT Audit Lead to drive internal IT audit activities, identify root causes, and work with the risk division to improve business processes. You will oversee audit planning, evidence collection, and reporting while ensuring compliance with IT controls and security standards.

The role emphasizes collaboration with stakeholders, delivering actionable recommendations, and monitoring implementation of controls to strengthen Amartha's IT governance and risk management framework.

Qualifications

• Degree in IT, information systems, or computer science from a reputable university.
• 6+ years in auditing IT controls (GITC, application, security) in similar industries.
• Experience with ISMS/ISO27001 reviews, cyber security, and regulatory IT compliance.
• Familiar with COBIT, ITIL, TOGAF, ISO 31000 frameworks.

Responsibilities

• Ensure IT Internal Audit plan is executed properly and evidence/documentation supports findings.
• Collect/analyze data to detect anomalies, deficient controls, fraud, or non-compliance.
• Prepare IT audit working papers and detailed audit report.
• Provide recommendations to minimize risks to shareholders and monitor open issues.
• Maintain good relations with auditee and counterparts during audits.

Skills

IT audit

Root cause analysis

Data analysis

Project management

Communication skills

Education

Bachelor's degree in IT/IS/CS

Tools

COBIT

ITIL

ISMS

ISO27001

CISA

CRISC

Job description

Amartha is seeking an IT Audit Lead to drive internal IT audit activities, identify root causes, and work with the risk division to improve business processes. You will oversee audit planning, evidence collection, and reporting while ensuring compliance with IT controls and security standards.

The role emphasizes collaboration with stakeholders, delivering actionable recommendations, and monitoring implementation of controls to strengthen Amartha's IT governance and risk management framework.