IT Audit Manager

Kredivo Group; Daerah Khusus Ibukota Jakarta; On-site; EUR 30.000 - 45.000; Full time

Job summary

Kredivo Group, a leading company in the fintech sector, is seeking an IT Auditor to perform comprehensive IT audits of systems and processes to ensure compliance. The ideal candidate will possess strong technical skills, relevant experience in IT auditing, and the ability to report findings effectively to upper management. Join us to play a crucial role in enhancing our security and compliance posture in a dynamic work environment.

Qualifications

• Minimum 3 years in IT auditing or IT risk management with strong technical skills.
• Experience in audits for complex IT systems and security controls is essential.
• Good communication skills in Bahasa Indonesia and English.

Responsibilities

• Perform IT audits on systems and processes for compliance.
• Evaluate IT controls, security policies, and governance structures.
• Identify vulnerabilities in system configurations and access control.

Skills

Programming Languages

Cybersecurity & Risk Management

Data Analysis & Reporting

Education

Bachelor’s degree in Information Technology

Tools

AWS

Linux

SQL Server

Job description

Key Responsibilities:

• Perform IT audits on systems, applications, and processes to ensure compliance with internal policies and regulatory requirements.
• Evaluate the effectiveness of IT controls, security policies, and governance structures.
• Review system configurations, data management processes, and access control mechanisms to identify vulnerabilities and risks.

Education:

Bachelor’s degree in Information Technology, Computer Science, or a related field.

Experience:

• Minimum of 3 years of experience in IT auditing, IT risk management, IT security, or a related field, with strong technical proficiency in coding and systems analysis.
• Experience in performing audits or reviews for complex IT systems, networks, and security controls.
• Experience with auditing frameworks like ISO 27001 is a plus.

Technical Skills:

• Programming Languages, such as Python, PowerShell, Java, SQL, Bash, JavaScript (or any other relevant languages for automation, scripting, and audits).
• Cybersecurity & Risk Management: Knowledge of firewalls, intrusion detection systems (IDS), encryption protocols, access controls, and vulnerability management
• Operating Systems & Databases, such as Linux, Windows Server, SQL Server, MySQL, Oracle, Active Directory.
• Cloud Security & Services, such as AWS, Google Cloud Platform (GCP), with a focus on security configurations and risk assessments.
• Version Control, such as Git, GitHub, GitLab (for reviewing and managing code changes in audit environments).
• Networking, such as TCP/IP, VPNs, DNS, HTTP/HTTPS, and network security fundamental
• Data Analysis & Reporting, such as Excel, Power BI, Tableau (for visualizing audit results and metrics)
• Audit Automation: Ability to write and deploy scripts to automate audit processes, data analysis, and reporting (e.g., using Python or PowerShell)
• Familiarity with penetration testing and vulnerability assessment methodologies and techniques for network, web applications, and infrastructure.
• Knowledge of information security and data privacy laws that applicable in Indonesia.

Certifications:

• General IT Certifications: Demonstrates a foundational understanding of IT systems, networks, and infrastructure, such as: CompTIA IT Fundamentals (ITF+), CompTIA A+, CompTIA Network+
• Coding & Automation Certifications: Emphasizes the candidate’s ability to write scripts and automate tasks for audits and security processes, such as Python Institute – PCEP (Python Programming Certification), Microsoft Certified: PowerShell Scripting, AWS Certified Developer – Associate
• Information Security Certifications: Focuses on securing information systems, understanding cybersecurity principles, and managing risks, such as Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), CompTIA Security+, Certified Ethical Hacker (CEH).
• Risk Management & Compliance Certifications, such as ISO 27001:2022 Information Security Management Systems is a plus.

Communication Skills:

• Good written and verbal communication skills both in Bahasa Indonesia and English, with the ability to effectively present audit findings and recommendations to senior management and other stakeholders.
• Ability to collaborate with cross-functional teams, including IT, risk management, and legal departments.

#LI-DI1