IT Auditor

PT TÜV SÜD INDONESIA; Jakarta Pusat; On-site; IDR 180,000,000 - 300,000,000; Full time

Job summary

PT TÜV SÜD INDONESIA is seeking an IT Security Audit professional to plan, execute, and report on management system audits. The role focuses on IT security, ISMS implementation, and ISO 27001:2022 within a certification context.

You will prepare audit programs, collect evidence, identify nonconformities, and guide clients through corrective actions to achieve compliant certification. Jakarta-based with on-site requirements and global standards.

Qualifications

• Bachelor's degree in Computer Science or IT with at least 2 years IT experience and exposure to IT security.
• Experience implementing ISMS ISO/IEC 27001:2022 within audit environments.
• Familiarity with ISO 19011 auditing techniques and practices.
• Lead Auditor certification from IRCA/PECB/Exemplar Global is preferred.

Responsibilities

• Plan, conduct, and report IT management system audits per applicable standards.
• Prepare audit programs in iCert and coordinate audit arrangements with clients.
• Collect, verify, and evaluate objective evidence for conformity.
• Identify, document, and communicate audit findings and improvement opportunities.
• Review corrective actions and verify effective resolution of findings.
• Prepare accurate audit reports with recommendations for certification activities.
• Support report reviews to ensure audit documentation is complete and compliant.

Skills

IT Security

ISMS ISO/IEC 27001:2022

ISO 19011

Lead Auditor (preferred)

Education

Bachelor's degree in Computer Science / Information Technology

Job description

TÜV SÜD Group – A global leader in the field of testing, inspection, management system certification and product certification renowned for quality, integrity and technical excellence.

Established more than 150 years ago in Germany, TÜV SÜD Group is a leading global provider of technical services with more than 30,000 highly skilled employees across 1,000 offices worldwide. TÜV SÜD Group offers a wide range of testing & product certification, inspection, auditing & system certification, training and knowledge services. We are a premium quality, safety, and sustainability solutions provider.

This role is responsible for planning, conducting, reporting, and following up Information Security Management System (ISMS), IT Service Management System (ITSMS), and other applicable IT-related management system audits in accordance with relevant standards, accreditation requirements, and procedures.

Key Responsibilities

• Plan, prepare, and conduct IT Management System audits in accordance with applicable certification requirements, ISO 19011, company procedures, and professional auditing standards.
• Prepare and submit audit programs through iCert, including coordinating audit arrangements and reviewing relevant client information.
• Collect, verify, and evaluate objective evidence to assess conformity with applicable standards and certification requirements.
• Identify, document, and communicate audit findings, including nonconformities and opportunities for improvement.
• Review and follow up on corrective actions submitted by clients to verify effective resolution of audit findings.
• Prepare accurate, complete, and timely audit reports, including recommendations related to certification activities.
• Support report review activities when assigned, ensuring audit documentation is technically complete and compliant with applicable requirements

Key Requirements

• Bachelor’s degree in Computer Science, Information System, Information Technology, or another relevant discipline
• Minimum 2 years of professional experience in Information Technology with exposure in IT Security
• Having knowledge and familiarity in implementation of ISMS ISO/IEC 27001:2022 standard
• Having knowledge and familiarity in implementation of general management system auditing technique based on ISO19011
• Practical experience with ISO 27001 is preferred
• Certified as a Lead Auditor certificates from an accredited international organization (such as IRCA, PECB, Exemplar Global or equivalent) is preferred

We test, we audit, we inspect, we advise. We never stop challenging ourselves for the safety of society and its people. We breathe technology, we strive for professional excellence, and we leave a mark. We take the future into our hands. We are TÜV SÜD Group.