IT GRC

Lancesoft Indonesia; Jakarta Pusat; On-site; IDR 260,000,000 - 420,000,000; Full time

Job summary

Lancesoft Indonesia is seeking an IT Compliance & Governance professional to develop and enforce policies and controls across the organization in Jakarta. The role ensures alignment with ISO 27001, ISO 22301, and PCI DSS, and drives timely audit closures and risk mitigation.

The ideal candidate will have 3+ years’ experience in IT compliance, strong documentation skills, and the ability to train teams on governance and security practices.

Qualifications

• Bachelor's degree in IT or related field.
• 3+ years in IT compliance, governance, audit, or information security.
• Excellent analytical, documentation, and communication skills.
• Knowledge of IT GRC frameworks (COBIT, ISO 27001, ISO 22301, PCI DSS, or NIST).

Responsibilities

• Develop, maintain, and enforce IT policies aligned with ISO 27001, ISO 22301, and PCI DSS.
• Manage IT fixed assets, requests, devices, and disposal processes.
• Conduct internal compliance assessments and risk evaluations.
• Coordinate IT audit activities and close findings timely.
• Support business continuity planning and DR testing.
• Provide compliance advisory and training to IT and business teams.

Skills

IT Governance

Compliance & Audit

Information Security

Regulatory Standards

Documentation

Education

Bachelor's Degree in IT/CS/IS

Tools

COBIT

ISO 27001

ISO 22301

PCI DSS

NIST

Job description

• - Develop, maintain, and enforce IT policies, standards, and procedures aligned with ISO 27001, ISO 22301, and PCI DSS requirements.
• - Manage and regularly review IT fixed assets (request, manage active devices, and disposal)
• - Monitoring IT Security weekly checking (Office, EDR, SAS Alert, and J-Sec).
• - Conduct internal compliance assessments, risk evaluations, and control testing to ensure adherence to corporate governance and regulatory standards.
• - Coordinate IT audit activities and ensure timely closure of audit findings and risk mitigation actions.- Support business continuity and disaster recovery planning (BCP/DRP) and ensure readiness through periodic tests and documentation.
• - Handle IT Support user and change request (Office365, anti virus, firewall, and windows patch).
• - Provide compliance advisory and training to IT and business teams to promote awareness of security, governance, and ethical practices.
• - Collaborate with regional or headquarter governance teams to align local compliance initiatives with global standards.
• - Familiar with IT Compliance Frameworks and Standards (ISO 27001, ISO 22301, PCI DSS, COBIT, NIST, and UU PDP)
• - Technical Support (troubleshooting hardware/software issues, UEM (Unified Endpoint Management), MFA, and VPN Global Protect)
• - IT Infrastructure Management (Servers, networking, and storage (windows server, linux environment) is a plus.
• - Business Continuity & Disaster Recovery (BCP&DRP): BCP exercise (firedrill, natural disaster, man-made disaster, and cybersecurity monitoring and detection).
• - Developing and Implementing IT Security Policies
• -IT Audit and Compliance Checklists (Self assessment).
• - Education: Bachelor’s Degree / S1 (Information Technology, Computer Science, Information System, or a related field).
• - 3+ years of experience IT Compliance, governance, audit, or information security.
• - Excellent analytical, documentation, and communication skills.
• - Strong understanding of IT GRC frameworks (COBIT, ISO 27001, ISO 22301, PCI DSS or NIST)
• - Professional certifications such as CISA, ISO 27001 Lead Implementer/Auditor, or ITIL are advantageous.