IT Compliance - GTech

Gtech; Tangerang; On-site; IDR 180,000,000 - 280,000,000; Full time

Job summary

Gtech is seeking an IT Risk and Compliance Senior Officer to support, execute, and continuously improve our IT governance, risk, and compliance activities. This role focuses on hands-on implementation, operational oversight, and audit support for ISO/IEC 27001 and GDPR/PDP, with alignment to NIST CSF.

The role requires experience in control design, implementation, and documentation, ensuring governance and security controls are embedded across project delivery, change management, design reviews,

Qualifications

• Strong knowledge of IT Governance, IT Controls, and Information Security Controls.
• Hands-on understanding of ISO/IEC 27001, GDPR/PDP Regulation, NIST CSF / NIST SP 800.
• Experience in control design, control implementation, and control effectiveness assessment.
• High attention to detail with strong documentation, evidence management, and audit support skills.

Responsibilities

• Support the implementation, operation, and continuous improvement of the ISO/IEC 27001 ISMS.
• Execute compliance activities related to GDPR and applicable data protection regulations.
• Assist in mapping, maintaining, and monitoring security controls aligned with NIST CSF / NIST SP 800 series.
• Maintain compliance documentation, evidence, and records required for audits and assessments.

Skills

IT governance

IT controls

ISO 27001

GDPR compliance

NIST CSF

risk assessment

audit support

documentation

stakeholder coordination

Job description

The IT Risk and Compliance Senior Officer is responsible for supporting, executing, and continuously improving the organization’s IT governance, risk, and compliance (GRC) activities. This role focuses on hands-on implementation, operational oversight, and audit support for ISO/IEC 27001 (internal and external audits), as well as compliance with GDPR / PDP Regulation and NIST requirements. The role ensures that governance and security controls are effectively embedded across project delivery, change management, design reviews, audit processes, and policy lifecycle within a technology-focused organization.

Role Description

• Support the implementation, operation, and continuous improvement of the ISO/IEC 27001 Information Security Management System (ISMS).
• Execute compliance activities related to GDPR and applicable data protection regulations.
• Assist in mapping, maintaining, and monitoring security controls aligned with NIST CSF / NIST SP 800 series.
• Maintain compliance documentation, evidence, and records required for audits and assessments.

Role Requirement

• Strong knowledge of IT Governance, IT Controls, and Information Security Controls
• Hands-on understanding of ISO/IEC 27001 (Clauses & Annex A), GDPR/PDP Regulation, NIST CSF / NIST SP 800
• Experience in control design, control implementation, and control effectiveness assessment
• Skilled in risk assessment, risk register management, and risk treatment tracking
• High attention to detail with strong documentation, evidence management, and audit support skills
• Experience in developing and maintaining policies, standards, procedures, and guidelines
• Ability to translate regulatory and security standards into operational and technical controls
• Familiar with secure-by-design and privacy-by-design principles
• Experience supporting project governance, SDLC controls, and compliance checkpoints
• Exposure to Change Control Board (CCB) and Design Review Board (DRB) processes
• Strong stakeholder communication and coordination across IT, Security, Engineering, PMO, and Legal
• Ability to prepare compliance reports, risk summaries, and management documentation
• Self-motivated, able to work independently with minimal supervision

When we stand united, there’s nothing we can’t achieve.

Leading the future of technology with innovative solutions that transform businesses and drive sustainable growth.

GDC (Gtech Development Center),Jl. Jend. Sudirman No.15, Sukasari, Kec.Tangerang, Kota Tangerang, Banten 15118, Indonesia