IT Governance Specialist

Indodana; Jakarta Pusat; On-site; IDR 480,000,000 - 600,000,000; Full time

Job summary

Indodana in Jakarta is seeking an IT GRC leader to drive governance, risk, and compliance across the organization. You will work with security, data, compliance, and legal teams to redefine requirements and implement policies that align with business strategy.

The role requires 4–8 years of IT governance experience, familiarity with ISO 27001, PCI-DSS, SOC2, POJK and UU PDP, and strong leadership and communication skills. A security certification is a plus.

Qualifications

• Bachelor's degree in computer science or related field or equivalent work experience.
• Strong logical and problem solving skills.
• Excellent verbal and written communication and organizational skills.
• Leadership and negotiation skills.
• Knowledge of cybersecurity standards such as ISO 27001, PCI-DSS, and SOC2.
• Knowledge of POJK and UU PDP regulations.
• Knowledge of cybersecurity frameworks.
• 4–8 years of IT governance experience preferred.
• Advanced degree or cybersecurity certification (CISSP, CISA) is a plus.
• Having Protection Officer certification is a plus.

Responsibilities

• Make recommendations to senior management to create IT GRC policies that would improve internal control and security posture.
• Serve as the primary owner to drive change management and implementation for IT GRC policies.
• Communicate IT Security, Risk, Governance and Compliance matters to internal and external stakeholders.
• Collaborate with senior management to understand contexts, strategy and governance needs to adapt policies accordingly.
• Design effective governance policies for company operations and regulatory compliance.
• Work with security, data, compliance, and legal teams to define system requirements and processes.
• Oversee implementation of governance policies across the organization.
• Contribute to improvements of the company’s security policies and processes.

Skills

Leadership

Negotiation

Communication

Problem solving

Cybersecurity frameworks

Education

Bachelor's degree in computer science or related fields

Advanced degree or cybersecurity certification (CISSP, CISA)

Protection Officer certification

Job description

Company Description

Indodana Fintech is an OJK-licensed financial technology company that operates a credit marketplace for peer-to-peer loans. Our mission is to achieve financial inclusion by enabling lenders to provide loans to the 100 million underbanked Indonesians. Leveraging sophisticated big data and artificial intelligence technologies, we connect hundreds of lenders with creditworthy borrowers every day.

Company Description

Indodana Fintech is an OJK-licensed financial technology company that operates a credit marketplace for peer-to-peer loans. Our mission is to achieve financial inclusion by enabling lenders to provide loans to the 100 million underbanked Indonesians. Leveraging sophisticated big data and artificial intelligence technologies, we connect hundreds of lenders with creditworthy borrowers every day.

Our team hailed from Silicon Valley Tech companies such as Google, Microsoft, LinkedIn and Sofi as well as Indonesian startups such as Doku, Touchten. We have graduates from well known universities such as Universitas Indonesia, ITB, Stanford, University of Washington, Cornell and many others. We are building a company with the same culture of openness, transparency, drive and meritocracy as Silicon Valley companies. Join us in our cause to build a world class fintech company in Indonesia.

Job Description

• Make recommendations to senior management to create IT GRC policies that would improve internal control and security posture of the company while satisfying the consideration of all stakeholders including: business users, HR, compliance, legal, etc
• Become the main PIC to drive change management and implementation for IT GRC policies.
• Become the main PIC for communicating things related to IT Security, Risk, Governance and Compliance for both internal and external stakeholders.
• Working closely with senior management personnel across the organization to understand the organization’s contexts, strategy and governance needs to adapt policies accordingly
• Liaising with stakeholders to design effective governance policies for company operations and regulatory compliance
• Working with the security, data, compliance, and legal teams to redefine the requirements of our systems’ implementation and processes
• Overseeing the implementation of the governance policies across the organization
• Contributing to the improvements of the company’s security policies and processes

Qualifications

• Bachelor's degree in computer science or related fields, or equivalent work experience
• Strong logical & problem solving skills
• Excellent verbal/written communication & organizational skills
• Have leadership and negotiation skills
• Knowledge of cybersecurity standards such as ISO 27001, PCI-DSS, and SOC2
• Knowledge of regulations such as POJK and UU PDP
• Knowledge of cybersecurity frameworks
• Extensive experience 4-8 years in IT governance industry is preferred
• Advanced degree or cybersecurity certification (CISSP, CISA) is a plus
• Having Protection Officer certification is a plus