IT Governance Risk Compliance & Security

Indivara Group; Jakarta Pusat; On-site; IDR 900,000,000 - 1,500,000,000; Full time

Job summary

Indivara Group seeks an IT Lead to own the payments platform and actively contribute to the group’s technology solutions. You will work with intra-group engineering teams to run and improve key systems.

This hands-on role leads incident response, drives platform reliability, and advances governance of technology risk and outsourcing, including DR planning and security-by-design. You will operate in a lean, accountable setup.

Qualifications

• 7+ years in platform engineering, IT operations, security/tech risk, or technology leadership in regulated environments.
• Banking and Payments domain knowledge expected.
• Strong hands-on ownership of production systems: incident handling, root-cause analysis, operational governance.
• Proven ability to implement practical Technology Risk Management/security controls with engineers.
• Strong knowledge of outsourcing risk management and ability to govern vendors/outsourced engineering delivery.

Responsibilities

• Be accountable for payment system stability end-to-end: triage, root cause, fixes, and prevention.
• Own production support: incident management, on-call expectations, post-mortems, problem management.
• Set and track operational metrics: uptime/latency, incident frequency, MTTR, failed transactions, backlog of known issues.
• Innovate: drive tech stack and process improvements (release discipline, observability, environments, automated testing, security-by-design).
• Implement practical engineering governance: change/release management, production access controls, environment segregation, quality gates.
• Drive resilience: DR planning and exercises (RTO/RPO), dependency mapping and removal of single points of failure.
• Own the TRM framework: risk assessments, risk register, control implementation and evidence readiness.
• Own outsourcing governance (including intra-group): due diligence, ongoing monitoring, SLAs/KPIs, access governance, incident/change requirements, auditability.

Skills

Platform ownership

Incident handling

Security controls

Outsourcing governance

Cloud / DevSecOps

Regulated environments

Leadership

Tools

Observability tooling

Automation testing

Security controls tooling

Job description

Indivara Group is hiring an IT Lead to be the accountable owner for our payments platform and is expected to be an active contributor in relation to Indivara Group’s technology solutions. You will work closely with our intra-group engineering teams who build and operate key systems.

This is a hands‑on “run + improve” role: you will lead incident response, drive platform reliability, and continuously improve our processes and tech stack while keeping us audit‑ready.

What You’ll Own

A) Platform Ownership

• Be accountable for payment system stability and issues end-to-end: triage, root cause, fixes, and prevention.
• Own production support: incident management, on‑call expectations, post‑mortems, problem management.
• Set and track operational metrics: uptime/latency, incident frequency, MTTR, failed transactions, backlog of known issues.
• Innovate: propose and drive tech stack and process improvements (release discipline, observability, environments, automated testing, security‑by‑design).
• Implement practical engineering governance: change/release management, production access controls, environment segregation, quality gates.
• Drive resilience: DR planning and exercises (RTO/RPO), dependency mapping and single‑point‑of‑failure removal.

C) MAS TRM & Outsourcing Governance

• Own the TRM framework: risk assessments, risk register, control implementation and evidence readiness.
• Own outsourcing governance (including intra‑group): due diligence, ongoing monitoring, SLAs/KPIs, access governance, incident/change requirements, auditability.

Requirements

• 7+ years in platform engineering, IT operations, security/technology risk, or technology leadership in regulated environments
• Banking and Payments domain knowledge is expected
• Strong hands‑on ownership of production systems: incident handling, root‑cause analysis, operational governance.
• Proven ability to implement practical Technology Risk Management/security controls (policies + controls + evidence + monitoring) with engineers.
• Strong knowledge of outsourcing risk management and ability to govern vendors/outsourced engineering delivery.
• Comfortable being the single accountable owner in a lean setup; can drive outcomes through influence.
• Familiarity with cloud environment, DevSecOps and secure SDLC