IT Compliance and Governance (Jakarta)

Peoplyee; Jakarta Pusat; On-site; IDR 180,000,000 - 360,000,000; Full time

Job summary

Peoplyee is seeking an IT Compliance & Information Security Lead in Jakarta to establish and maintain governance, risk, and compliance programs aligned with ISO 27001, ISO 22301, and PCI DSS. The role oversees security monitoring, audits, DR/BCP, and asset management within mixed Windows/Linux environments.

The ideal candidate has 3+ years in IT compliance or information security, strong analytical and communication skills, and certifications such as CISA or ISO lead auditors are advantageous.

Qualifications

• Bachelor's degree in IT, CS, IS, or related field.
• At least 3 years of experience in IT compliance, governance, auditing, or information security.
• Familiarity with data protection regulations and IT audit practices.
• Excellent analytical, documentation, and communication skills.
• Certifications such as CISA, ISO 27001 Lead Implementer/Auditor are advantageous.

Responsibilities

• Develop, maintain, and enforce IT policies, standards, and procedures aligned with ISO 27001, ISO 22301, and PCI DSS.
• Manage IT fixed assets; process device requests, asset records, and disposal.
• Monitor IT security via weekly checks of security tools and platforms.
• Conduct internal compliance assessments, risk evaluations, and control testing.
• Coordinate IT audits and ensure timely resolution of findings and risk mitigation.
• Develop and test business continuity and disaster recovery plans.
• Support MS 365, antivirus, firewalls, and Windows patch management.
• Provide compliance guidance and training to IT and business teams.
• Coordinate with governance teams to align initiatives with standards.
• Provide technical support for hardware/software, EPM, MFA, and VPN connectivity.
• Support servers, networks, and storage in Windows/Linux environments.
• Conduct BCP/DR exercises and cybersecurity monitoring.

Skills

IT governance

Compliance frameworks

Auditing

Information security

Analytical skills

Documentation

Communication skills

Regulatory awareness

Education

Bachelor's degree in Information Technology, Computer Science, Information Systems, or related field

Job description

Job Information

Job ID

57021

Software/Information Processing

Work Location

Jakarta

Business Level

Other Languages

None

Jobs Description

• Develop, maintain, and enforce information technology policies, standards, and procedures aligned with ISO 27001, ISO 22301, and Payment Card Industry Data Security Standard requirements.
• Manage and periodically review information technology fixed assets, including device requests, active device records, and disposal processes.
• Monitor information technology security through weekly checks of Microsoft Office, endpoint detection and response tools, security alert systems, and other security platforms.
• Conduct internal compliance assessments, risk evaluations, and control testing to ensure adherence to governance and regulatory standards.
• Coordinate information technology audits and ensure the timely resolution of findings and completion of risk mitigation measures.
• Develop, document, test, and improve business continuity and disaster recovery plans.
• Manage user support and change requests involving Microsoft 365, antivirus software, firewalls, and Windows patch management.
• Provide compliance guidance and training to information technology and business teams to strengthen awareness of security, governance, privacy, and ethical practices.
• Coordinate with relevant governance teams to align compliance initiatives with applicable standards and policies.
• Provide technical support for hardware and software issues, unified endpoint management, multi-factor authentication, and virtual private network connectivity.
• Support the management of servers, networks, and storage in Windows Server and Linux environments.
• Conduct business continuity and disaster recovery exercises, including emergency simulations and cybersecurity monitoring and response activities.
• Develop information security and privacy policies covering data protection, confidentiality, audit procedures, and compliance self-assessments.

Jobs Requirements

• Education: Bachelor's degree in Information Technology, Computer Science, Information Systems, or a related field.
• Experience: At least 3 years of experience in information technology compliance, governance, auditing, or information security.
• Strong understanding of information technology governance, risk, and compliance frameworks, including Control Objectives for Information and Related Technologies, ISO 27001, ISO 22301, Payment Card Industry Data Security Standard, or the National Institute of Standards and Technology framework.
• Familiarity with applicable data protection regulations and information technology audit practices.
• Excellent analytical, documentation, and communication skills.
• Professional certifications, such as Certified Information Systems Auditor, ISO 27001 Lead Implementer or Lead Auditor, or Information Technology Infrastructure Library certification, are advantageous.
• THR (Lebaran Allowance): 1 month of salary
• Private insurance after obtaining permanent employee status