IT Audit Lead: Cyber & Controls Champion

Gotogroup; Jakarta Pusat; On-site; IDR 400,000,000 - 700,000,000; Full time

Job summary

GoTo Group in Jakarta Central, Indonesia, is seeking an Internal Audit Lead (IT) to drive end-to-end risk-based IT audits across infrastructure, applications, cloud environments, and data governance.

You will assess IT controls, cybersecurity, and data risks, work with Technology, Information Security, Risk, and business stakeholders, and translate findings into practical recommendations to strengthen governance and resilience.

Qualifications

• 6–8 years of IT audit or related assurance experience.
• Strong knowledge of IT general controls, application controls, and cybersecurity.
• Familiarity with Indonesian tech regulations and governance requirements.

Responsibilities

• Plan and execute risk-based IT audits across infrastructure, apps, cloud, and governance.
• Assess IT controls, access, change, incident, and other key processes.
• Evaluate cybersecurity, data governance, and business continuity risks.
• Perform walkthroughs, testing, evidence analysis, and documentation.
• Develop findings with root causes and practical remediation recommendations.
• Collaborate with Technology, Information Security, Risk, Compliance and business units to validate and monitor remediation.

Skills

Stakeholder management

Analytical thinking

Project management

Communication

Education

CISA certification

Tools

COBIT

ISO 27001

NIST

Job description

GoTo Group in Jakarta Central, Indonesia, is seeking an Internal Audit Lead (IT) to drive end-to-end risk-based IT audits across infrastructure, applications, cloud environments, and data governance.

You will assess IT controls, cybersecurity, and data risks, work with Technology, Information Security, Risk, and business stakeholders, and translate findings into practical recommendations to strengthen governance and resilience.