IT GRC Analyst: Governance, Risk & Compliance

PT Bank Rakyat Indonesia (Persero) Tbk; Jakarta Pusat; On-site; IDR 180,000,000 - 300,000,000; Full time

Job summary

Bank Rakyat Indonesia (BRI) is seeking an IT GRC professional to support governance, risk, and compliance activities. You will coordinate IT control assessments, gather audit evidence, and ensure alignment with policies and regulatory requirements.

The role requires collaboration with IT, Cybersecurity, Risk, and Audit teams, and familiarity with frameworks such as ISO 27001, NIST CSF, and SOX. Strong documentation and stakeholder skills are essential.

Qualifications

• Bachelor’s degree or equivalent in information security, IT, or risk.
• 2+ years of experience in IT GRC, IT Audit, IT Risk, or compliance.
• Knowledge of IT governance, risk management, internal controls, and compliance practices.
• Familiarity with IT control assessment processes and related tools.

Responsibilities

• Support IT Governance, Risk, and Compliance initiatives, including control assessments, compliance activities, and audit coordination.
• Act as a liaison between IT/IS/Cybersecurity and Risk/Audit functions to facilitate assessments and evidence collection.
• Manage GRC activities and documentation, including questionnaires, control assessments, audit evidence, asset information, and user access reviews.
• Perform and document control testing, identify compliance gaps, and support audit narratives and reports.
• Monitor and support remediation of audit findings, risk exceptions, and compliance issues, tracking action plans and progress.
• Collaborate with IT/IS teams to review and maintain security policies, procedures, KPIs, and KRIs.
• Monitor changes in regulations, frameworks, and industry best practices to support ongoing compliance and risk management.
• Work with cross-functional stakeholders including IT, Cybersecurity, Risk, Audit, Engineering, and Legal.

Skills

IT GRC

Risk assessment

Audit coordination

Control testing

Documentation

Stakeholder management

Education

Bachelor’s degree in Information Security/IT

Information Systems/Technology

Tools

GRC platforms/tools

Excel

SharePoint

Job description

Bank Rakyat Indonesia (BRI) is seeking an IT GRC professional to support governance, risk, and compliance activities. You will coordinate IT control assessments, gather audit evidence, and ensure alignment with policies and regulatory requirements.

The role requires collaboration with IT, Cybersecurity, Risk, and Audit teams, and familiarity with frameworks such as ISO 27001, NIST CSF, and SOX. Strong documentation and stakeholder skills are essential.