IT Auditor Lead

PT Mid Solusi Nusantara (MEKARI); Jakarta Utara; On-site; IDR 400,000,000 - 700,000,000; Full time

Job summary

Mekari, Indonesia's leading SaaS company, seeks an IT Audit leader to strengthen governance, risk, and controls across information systems. You will manage quarterly audit plans, drive end-to-end IT audits, and assess IT controls in applications, infrastructure, cloud, and data governance.

The role emphasizes collaboration with Engineering, Product, and InfoSec and requires deep knowledge of ITGCs and cybersecurity frameworks such as ISO 27001, SOC 2, NIST, or COBIT.

Qualifications

• 3–6 years of experience in IT Audit, IT Risk, Cybersecurity, or Technology Assurance.
• Strong understanding of IT general controls (ITGC), application controls, cloud environments, cybersecurity frameworks, and technology risk assessment.
• Familiarity with standards such as ISO 27001, SOC 2, NIST, COBIT, or similar frameworks.
• Relevant certifications such as CISA, CRISC, ISO 27001 Lead Auditor/Implementer are a strong plus.
• Strong communication, coordination, interviewing, and issue-challenging skills when dealing with technical teams.
• Highly detail-oriented, analytical, and comfortable managing multiple concurrent audit or review activities.

Responsibilities

• Maintain the quarterly IT internal audit plan, ensuring alignment with key risks and organizational priorities.
• Lead end-to-end IT audit engagements, from planning, fieldwork, to reporting.
• Identify and assess IT-related risks, including cybersecurity, data privacy, operational technology risks, and emerging tech risks.
• Evaluate the effectiveness of IT controls across applications, infrastructure, cybersecurity, cloud environments, and data governance.
• Review system configurations, access controls, change management, and IT operations for potential risks and control gaps.
• Conduct annual audits for compliance with ISO 27001 and other relevant standards or regulations, as well as special audits (e.g., investigations, security incidents, and ad hoc assignments).
• Drive and monitor the implementation of IT audit recommendations across relevant teams (Engineering, Product, InfoSec, IT Ops).
• Develop and maintain audit reports, issue logs, dashboards, and management updates on IT control health.
• Provide early warning indicators on emerging IT risks, system vulnerabilities, or deviations from expected controls.
• Support awareness initiatives related to IT governance, cybersecurity, and internal controls.

Skills

IT Audit

IT Risk

Cybersecurity

Technology Assurance

Tools

ISO 27001

SOC 2

NIST

COBIT

Job description

Requirements

• 3–6 years of experience in IT Audit, IT Risk, Cybersecurity, or Technology Assurance.
• Strong understanding of IT general controls (ITGC), application controls, cloud environments, cybersecurity frameworks, and technology risk assessment.
• Familiarity with standards such as ISO 27001, SOC 2, NIST, COBIT, or similar frameworks.
• Relevant certifications such as CISA, CRISC, ISO 27001 Lead Auditor/Implementer are a strong plus.
• Strong communication, coordination, interviewing, and issue-challenging skills when dealing with technical teams.
• Highly detail-oriented, analytical, and comfortable managing multiple concurrent audit or review activities.

Maintain the quarterly IT internal audit plan, ensuring alignment with key risks and organizational priorities.

Lead end-to-end IT audit engagements, from planning, fieldwork, to reporting.

Identify and assess IT-related risks, including cybersecurity, data privacy, operational technology risks, and emerging tech risks.

Evaluate the effectiveness of IT controls across applications, infrastructure, cybersecurity, cloud environments, and data governance.

Review system configurations, access controls, change management, and IT operations for potential risks and control gaps.

Conduct annual audits for compliance with ISO 27001 and other relevant standards or regulations, as well as special audits (e.g., investigations, security incidents, and ad hoc assignments).

Drive and monitor the implementation of IT audit recommendations across relevant teams (Engineering, Product, InfoSec, IT Ops).

Develop and maintain audit reports, issue logs, dashboards, and management updates on IT control health.

Provide early warning indicators on emerging IT risks, system vulnerabilities, or deviations from expected controls.

Support awareness initiatives related to IT governance, cybersecurity, and internal controls.

Information Technology Services 1,001-5,000 employees

Mekari is Indonesia's no. 1 Software-as-a-Service (SaaS) company. Our mission is to empower businesses and professionals to progress effortlessly. Our products (Talenta, Sleekr, Jurnal, KlikPajak) have been used by tens of thousands of business in Indonesia.

To reach millions, we need more people like you: entrepreneurs, builders, owners inside the company who are eager to grow at scale. Join us to empower more businesses with technology.

Mekari is Indonesia's no. 1 Software-as-a-Service (SaaS) company. Our mission is to empower businesses and professionals to progress effortlessly. Our products (Talenta, Sleekr, Jurnal, KlikPajak) have been used by tens of thousands of business in Indonesia.

To reach millions, we need more people like you: entrepreneurs, builders, owners inside the company who are eager to grow at scale. Join us to empower more businesses with technology.

Researching careers? Find all the information and tips you need on career advice.