IT Governance Strategist

Cermati.com; Daerah Khusus Ibukota Jakarta; On-site; IDR 100.000.000 - 200.000.000; Full time

Job summary

An established industry player is seeking a dedicated IT Governance, Risk, and Compliance (GRC) specialist to enhance its security posture and internal controls. This role involves collaborating with senior management to develop and implement IT GRC policies, ensuring compliance with regulatory standards while fostering communication across all stakeholders. The ideal candidate will have extensive experience in cybersecurity frameworks and a strong background in the financing industry. Join a dynamic team that values transparency and innovation, and contribute to building a world-class fintech company in Indonesia.

Qualifications

• Bachelor's degree or equivalent experience in computer science or related fields.
• 10+ years in cybersecurity and IT governance preferred.

Responsibilities

• Drive change management for IT GRC policies and communicate IT Security matters.
• Liaise with stakeholders to design effective governance policies.

Skills

Logical & Problem Solving Skills

Verbal/Written Communication Skills

Organizational Skills

Leadership Skills

Negotiation Skills

Cybersecurity Standards Implementation

Cybersecurity Framework Knowledge

Education

Bachelor's Degree in Computer Science

Advanced Degree or Cybersecurity Certification

Tools

ISO 27001

PCI-DSS

SOC2

Job description

Company Description

Indodana Fintech is an OJK-licensed financial technology company that operates a credit marketplace for peer-to-peer loans. Our mission is to achieve financial inclusion by enabling lenders to provide loans to the 100 million underbanked Indonesians. Leveraging sophisticated big data and artificial intelligence technologies, we connect hundreds of lenders with creditworthy borrowers every day.

Our team hailed from Silicon Valley Tech companies such as Google, Microsoft, LinkedIn and Sofi as well as Indonesian startups such as Doku, Touchten. We have graduates from well known universities such as Universitas Indonesia, ITB, Stanford, University of Washington, Cornell and many others. We are building a company with the same culture of openness, transparency, drive and meritocracy as Silicon Valley companies. Join us in our cause to build a world class fintech company in Indonesia.

Job Description

• Make recommendations to senior management to create IT GRC policies that would improve internal control and security posture of the company while satisfying the consideration of all stakeholders including: business users, HR, compliance, legal, and others.
• Become the main PIC to drive change management and implementation for IT GRC policies.
• Become the main PIC for communicating things related to IT Security, Risk, Governance and Compliance for both internal and external stakeholders.
• Work closely with senior management personnel across the organization to understand the organization’s contexts, strategy and governance needs to adapt policies accordingly.
• Liaise with stakeholders to design effective governance policies for company operations and regulatory compliance.
• Work with the security, data, compliance, and legal teams to redefine the requirements of our systems’ implementation and processes.
• Oversee the implementation of the governance policies across the organization.
• Contribute to the improvements of the company’s security policies and processes.

Qualifications

• Bachelor's degree in computer science or related fields, or equivalent work experience.
• Good logical & problem solving skills.
• Excellent verbal/written communication & organizational skills.
• Leadership and negotiation skills.
• Deep experience in implementing cybersecurity standards such as ISO 27001, PCI-DSS, and SOC2.
• Deep experience in implementing cybersecurity rules as directed by regulators like personal data protection, financial regulations from OJK, etc.
• Deep experience and practical knowledge on how the industry implements cybersecurity frameworks.
• Extensive experience (10 years or more) in cybersecurity and IT governance industry is preferred.
• Advanced degree or cybersecurity certification (CISSP, CISA) is a plus.
• Data Protection Officer certification is a plus.
• Experience in the financing industry is a plus.