IT GRC

Siswaku Indonesia Pintar; Surakarta; On-site; IDR 180,000,000 - 300,000,000; Full time

Job summary

Siswaku Indonesia Pintar is seeking an experienced Information Security and IT GRC professional to develop, implement, and socialize IT policies and standards in line with Indonesian regulations.

The role requires coordinating with the compliance team, upgrading ISO 27001:2022 projects, and applying COBIT 2019, PCI DSS and related best practices to ensure governance across the organization.

Qualifications

• Bachelor’s degree in IT, IS, CS or related field.
• Minimum 3 years in IT GRC or IT Auditors roles.
• Experience developing and maintaining IT/security policies.
• Familiar with ISO 27001, ITIL, COBIT, SDLC.
• Strong coordination and communication skills.
• Experience with PCI DSS, NIST, SOC 2, GDPR.

Responsibilities

• Develop, maintain and socialize IT policies and procedures.
• Monitor policy implementation to align with company strategy.
• Implement governance using ISO 27001, COBIT 2019, PCI DSS.
• Coordinate with compliance to ensure initiatives meet standards.
• Manage ISO 27001:2022 project upgrades.

Skills

IT GRC

IT Governance

Policy development

Communication skills

Project management

Education

Bachelor’s degree in IT/IS/CS

Tools

ISO 27001

COBIT 2019

PCI DSS

NIST

SOC 2

GDPR

Job description

Responsibilities:

• Develop, maintain and socialize IT policies, standards and procedures according to internal and external requirements, including the applicable regulations in Indonesia.
• Conduct routine monitoring and evaluation of policies and procedures implementation are maintained to comply with the company's strategy.
• Implementing a good governance organization using the ISO 27001, COBIT 2019, PCI DSS framework or other relevant Technology & Security best practices.
• Coordinating with the compliance team to ensure that every initiative, development and collaboration comply with the standards and regulations (both internal and external).
• Manage ISO 27001:2022 project upgrade.

Requirements:

• Bachelor’s degree in Information Technology, Information Systems, Computer Science, or related field.
• A minimum of 3 years experiences as Information Security, IT Governance, Risk and Compliance (IT GRC) or IT Auditors.
• Experienced in developing and maintaining IT and/or information security policies and procedures.
• Having experiences with ISO 27001, ITIL, COBIT, SDLC.
• Coordination and Communication skills.
• Experience in Project Management, PDP, PCI DSS, NIST, SOC 2, GDPR.