IT Auditor Lead

Mekari; Daerah Khusus Ibukota Jakarta; On-site; IDR 300.000.000 - 400.000.000; Full time

Job summary

A tech firm in Jakarta is seeking an experienced IT Audit professional to maintain and lead internal audit engagements. You will assess IT-related risks, implement audit recommendations, and ensure compliance with standards like ISO 27001. Candidates should have 3-6 years of experience in IT Audit or related fields, and familiarity with SQL and cybersecurity frameworks is essential. Relevant certifications are a plus. Strong analytical skills and attention to detail are required for this role.

Qualifications

• 3–6 years of experience in IT Audit, IT Risk, Cybersecurity, or Technology Assurance.
• Strong understanding of IT general controls, application controls, and technology risk assessment.
• Familiarity with standards such as ISO 27001, SOC 2, NIST, COBIT.

Responsibilities

• Maintain the quarterly IT internal audit plan.
• Lead end-to-end IT audit engagements.
• Identify and assess IT-related risks including cybersecurity and data privacy.

Skills

IT Audit

Cybersecurity

Risk Assessment

Data Analysis

Technical Communication

Education

Relevant Certifications (CISA, CRISC, ISO 27001)

Tools

SQL

JavaScript

Python

Job description

Key Responsibilities

• Maintain the quarterly IT internal audit plan, ensuring alignment with key risks and organizational priorities.
• Lead end-to-end IT audit engagements, from planning, fieldwork, to reporting.
• Identify and assess IT-related risks, including cybersecurity, data privacy, operational technology risks, and emerging tech risks.
• Evaluate the effectiveness of IT controls across applications, infrastructure, cybersecurity, cloud environments, and data governance.
• Review system configurations, access controls, change management, and IT operations for potential risks and control gaps.
• Conduct annual audits for compliance with ISO 27001 and other relevant standards or regulations, as well as special audits (e.g., investigations, security incidents, and ad hoc assignments).
• Drive and monitor the implementation of IT audit recommendations across relevant teams (Engineering, Product, InfoSec, IT Ops).
• Develop and maintain audit reports, issue logs, dashboards, and management updates on IT control health.
• Provide early warning indicators on emerging IT risks, system vulnerabilities, or deviations from expected controls.
• Support awareness initiatives related to IT governance, cybersecurity, and internal controls.

Requirements

• 3–6 years of experience in IT Audit, IT Risk, Cybersecurity, or Technology Assurance.
• Strong understanding of IT general controls (ITGC), application controls, cloud environments, cybersecurity frameworks, and technology risk assessment.
• Familiarity with standards such as ISO 27001, SOC 2, NIST, COBIT, or similar frameworks.
• Strong technical foundation with familiarity in SQL, JavaScript, and Python for data analysis or system review.
• Relevant certifications such as CISA, CRISC, ISO 27001 Lead Auditor/Implementer are a strong plus.
• Strong communication, coordination, interviewing, and issue-challenging skills when dealing with technical teams.
• Highly detail-oriented, analytical, and comfortable managing multiple concurrent audit or review activities.