IT Consultant Governance, Risk, Compliance (GRC)

Sagara Technology; Jakarta Pusat; On-site; IDR 240,000,000 - 360,000,000; Full time

Job summary

SAGARA Technology in Jakarta, Indonesia is seeking an IT GRC Consultant to perform governance, risk, and compliance assessments, audits, and controls design. You will work with executives and IT teams to identify risks and craft mitigation strategies in a fast-paced startup environment.

The role requires 3+ years in IT GRC, hands-on assessment or IT audit, exposure to financial services, fluent English, and professional certifications such as CISA, CRISC, CGEIT, COBIT, ISO 27001 Auditor/Lead

Qualifications

• 3+ years of experience in IT GRC consulting, hands-on assessment or IT audit.
• Exposure to financial services sector.
• Fluent in English, both spoken and written.
• At least one relevant IT GRC certification (e.g., CISA, CRISC, CGEIT, COBIT, ISO 27001 Auditor/Lead Implementer, CISSP).

Responsibilities

• Assist IT GRC assessments and audits by conducting governance, risk, and compliance evaluations.
• Support IT risk management and compliance by identifying IT risks and recommending mitigation strategies.
• Ensure adherence to regulatory and framework requirements (OJK, BI, COBIT, ISO 27001, ISO 20001, NIST).
• Engage with senior executives, risk committees, and IT teams.
• Contribute to development and enhancement of IT governance policies.
• Assist senior consultants in managing IT GRC transformation initiatives.
• Promote continuous learning and adapt to startup dynamics.

Skills

IT GRC knowledge

Risk assessment

Communication

English proficiency

Education

Bachelor’s degree in IT/Business

Tools

CISA

CRISC

CGEIT

TOGAF

COBIT

ISO 27001 Auditor/Lead Implementer

CISSP

ITIL

Job description

SAGARA Technology

Jakarta, Indonesia Full-time Mid-Senior level

About the role

As an IT GRC Consultant, you will conduct IT governance, risk, and compliance assessments and audits, identify IT risks, and recommend mitigation strategies. You will help ensure adherence to OJK, BI, COBIT, ISO 27001, ISO 20001, and NIST requirements, contribute to the development of IT governance policies, and support senior consultants in executing IT GRC transformation initiatives. You will engage with senior executives, risk committees, and IT teams, and work independently in a fast-paced environment. Requires 3+ years of experience in IT GRC consulting, hands-on assessment or IT audit experience, exposure to financial services, fluent English, and at least one relevant certification (e.g., CISA, CRISC, CGEIT, COBIT, TOGAF, ITIL, ISO 27001 Auditor/Lead Implementer, or CISSP).

Responsibilities

• Assist in IT GRC assessments and audits by conducting IT governance, risk, and compliance evaluations.
• Support IT risk management and compliance by identifying IT risks and recommending mitigation strategies.
• Ensure adherence to regulatory and framework requirements such as OJK, BI, COBIT, ISO 27001, ISO 20001, and NIST.
• Engage effectively with senior executives, risk committees, and IT teams.
• Contribute to the creation and enhancement of IT governance policies.
• Assist senior consultants in managing and executing IT GRC transformation initiatives.
• Foster a continuous learning mindset and adapt to the evolving needs of a start-up environment.
• Work independently and take initiative in a fast-paced, startup environment.

Requirements

• Bachelor’s degree in a related field (IT, Business, Project Management, etc.).
• 3+ years of experience as an IT GRC Consultant.
• Strong affinity with IT governance, risk management, and compliance.
• Hands-on experience in IT GRC assessment or IT audit.
• Possess at least one relevant IT GRC certification such as ITIL, CISA, CRISC, CGEIT, TOGAF, COBIT, ISO 27001 Auditor / Lead Implementer, or CISSP.
• Fluent in spoken and written English, with the ability to communicate at senior executive levels.
• Exposure to the financial services sector.
• Excellent communication, interpersonal, analytical, presentation, and problem-solving skills.
• Ability to thrive in a start-up environment and adapt to changing priorities.
• Strong commitment to continuous learning and professional development.
• Startup mindset with the ability to work independently and take initiative.

About SAGARA Technology

SAGARA Technology

Building digital products that move Indonesia forward.

SAGARA Technology is a digital product studio and software house delivering enterprise software, mobile apps, and AI-driven platforms for clients across Southeast Asia. We ship measurable outcomes with small, senior, cross-functional squads.