IT Governance, Risk, Compliance

SeaBank Indonesia; Jakarta Pusat; On-site; IDR 240,000,000 - 420,000,000; Full time

Job summary

SeaBank Indonesia is seeking an IT GRC professional to analyze gaps between IT policies and controls, and to test design and operation of the IT control framework. You will monitor IT processes for regulatory alignment and prepare regulator submissions in coordination with compliance teams.

The role requires 5+ years in IT GRC or IT auditing within banking, insurance, or related sectors, with strong knowledge of ISO 27001, PCI-DSS, ITIL/COBIT and risk assessment methods.

Qualifications

• Minimum Bachelor's degree in Computer Engineering and/or computer science (specifically IT-related) and/or other related fields.
• Minimum 5 (five) years of experience in IT GRC or IT auditing in the banking, insurance, or related industries.
• Understanding of business processes and regulations related to the banking industry.
• Understanding of ISO 27001, ITIL, COBIT, and PCI-DSS standards.
• Understanding of system vulnerability detection and prevention tools and information leaks.

Responsibilities

• Analyze gaps between IT policies and procedures to ensure alignment with internal requirements and regulatory regulations.
• Test the design and operational effectiveness of the IT operational control framework.
• Monitor existing controls and IT processes in accordance with applicable regulations.
• Prepare reports and documents related to new products and features for submission to regulators in coordination with the regulatory compliance division or other relevant stakeholders.
• Coordinate the IT Steering Committee every quarter.
• Facilitate IT stakeholders and external/internal auditors in providing advice and adequate data.
• Monitor the resolution of audit findings.
• Create a security awareness program by providing newsletters, e-learning, and phishing campaigns to all employees.
• Analyze risks and ensure periodic reviews of IT-related key risk indicators (KRIs) and risk control assessments (RCSAs) to assess control effectiveness and identify new risks.
• Monitor risk acceptance and provide recommendations on appropriate risk management.
• Review vendor reviews related to IT risks, including information security if data is shared with vendors.
• Monitor periodic reviews of user access and security controls on the Bank's systems.

Skills

IT GRC

IT auditing

Regulatory compliance

Risk management

Information security

Vendor risk assessment

KRIs/RCSAs

ISO 27001

PCI-DSS

ITIL/COBIT

Education

Bachelor's degree in Computer Engineering

Bachelor's degree in Computer Science

Job description

• Analyze gaps between IT policies and procedures to ensure alignment with internal requirements and regulatory regulations.
• Test the design and operational effectiveness of the IT operational control framework.
• Monitor existing controls and IT processes in accordance with applicable regulations.
• Prepare reports and documents related to new products and features for submission to regulators in coordination with the regulatory compliance division or other relevant stakeholders.
• Coordinate the IT Steering Committee every quarter.
• Facilitate IT stakeholders and external/internal auditors in providing advice and adequate data.
• Monitor the resolution of audit findings.
• Create a security awareness program by providing newsletters, e-learning, and phishing campaigns to all employees.
• Analyze risks and ensure periodic reviews of IT-related key risk indicators (KRIs) and risk control assessments (RCSAs) to assess control effectiveness and identify new risks.
• Monitor risk acceptance and provide recommendations on appropriate risk management.
• Review vendor reviews related to IT risks, including information security if data is shared with vendors.
• Monitor periodic reviews of user access and security controls on the Bank's systems.

Requirements

• Minimum Bachelor's degree in Computer Engineering and/or computer science (specifically IT-related) and/or other related fields.
• Minimum 5 (five) years of experience in IT GRC or IT auditing in the banking, insurance, or related industries.
• Understanding of business processes and regulations related to the banking industry.
• Understanding of ISO 27001, ITIL, COBIT, and PCI-DSS standards.
• Understanding of system vulnerability detection and prevention tools and information leaks.