IT GRC

Siswaku Indonesia Pintar; Surakarta; On-site; IDR 300,000,000 - 480,000,000; Full time

Job summary

Siswaku Indonesia Pintar is seeking an experienced IT GRC professional to develop, implement, and socialize IT policies, standards, and procedures aligned with Indonesian regulations. You will lead governance initiatives and ensure adherence across projects.

You will collaborate with compliance teams, manage ISO 27001:2022 upgrades, and apply frameworks such as COBIT 2019, PCI DSS, NIST, and GDPR to maintain a strong information security posture.

Qualifications

• Bachelor’s degree in IT, IS, CS, or related field.
• Minimum 3 years experience in Information Security, IT GRC, or IT Auditors.
• Experience developing and maintaining IT/information security policies and procedures.
• Experience with ISO 27001, ITIL, COBIT, SDLC.
• Strong coordination and communication skills.
• Experience in Project Management, PDP, PCI DSS, NIST, SOC 2, GDPR.

Responsibilities

• Develop, maintain and socialize IT policies, standards and procedures according to internal and external requirements, including regulations in Indonesia.
• Conduct routine monitoring and evaluation of policies and procedures implementation to ensure compliance with the company's strategy.
• Implement a good governance organization using ISO 27001, COBIT 2019, PCI DSS framework or other relevant Technology & Security best practices.
• Coordinate with the compliance team to ensure initiatives comply with the standards and regulations (both internal and external).
• Manage ISO 27001:2022 project upgrade.

Skills

Coordination skills

Communication skills

IT GRC experience

Policy development

Project Management

Regulatory compliance

Education

Bachelor’s degree in Information Technology / Information Systems / Computer Science

Tools

ISO 27001

COBIT 2019

PCI DSS

ITIL

SDLC

NIST

SOC 2

GDPR

Job description

• Develop, maintain and socialize IT policies, standards and procedures according to internal and external requirements, including the applicable regulations in Indonesia.
• Conduct routine monitoring and evaluation of policies and procedures implementation are maintained to comply with the company's strategy.
• Implementing a good governance organization using the ISO 27001, COBIT 2019, PCI DSS framework or other relevant Technology & Security best practices.
• Coordinating with the compliance team to ensure that every initiative, development and collaboration comply with the standards and regulations (both internal and external).
• Manage ISO 27001:2022 project upgrade.

Requirements:

• Bachelor’s degree in Information Technology, Information Systems, Computer Science, or related field.
• A minimum of 3 years experiences as Information Security, IT Governance, Risk and Compliance (IT GRC) or IT Auditors.
• Experienced in developing and maintaining IT and/or information security policies and procedures.
• Having experiences with ISO 27001, ITIL, COBIT, SDLC.
• Coordination and Communication skills.
• Experience in Project Management, PDP, PCI DSS, NIST, SOC 2, GDPR.