IT GRC Associate: Fintech Governance & Compliance

Cermati.com; Jakarta Pusat; On-site; IDR 167,400,000 - 279,000,000; Full time

Job summary

Indodana Fintech in Jakarta seeks an IT GRC Compliance professional to assist in drafting internal policies and procedures in line with POJK, GDPR, and global standards. You will enforce IT GRC policies and work with IT infra and data teams on governance initiatives.

The role requires knowledge of cybersecurity standards and regulatory frameworks, with a focus on risk assessment and audit support across the organization.

Qualifications

• Bachelor's degree or equivalent work experience in a related field.
• Experience in Compliance, IT GRC, Risk, or IT Audit in financial services or banking is a plus.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication and organizational abilities.
• Leadership and process-oriented with negotiation skills.
• Knowledge of cybersecurity standards (ISO 27001, ISO 27701, PCI-DSS, NIST).
• Knowledge of POJK, PBI LPBBTI and UU PDP, GDPR; IT governance frameworks COBIT/ITIL.
• Data protection principles knowledge; DPO certification is a plus.

Responsibilities

• Research regulatory updates, best practices, and IT GRC benchmarks to support policy proposals.
• Design and enforce IT GRC policies aligned with regulations and global frameworks.
• Collect and summarize input from HR, Legal, and Business Units on IT compliance practices.
• Draft SOPs, update governance policies, and maintain compliance checklists.
• Map internal controls to cross-department workflows to reduce friction.
• Identify IT-related risks and conduct risk assessments with mitigation proposals.
• Collect audit evidence for internal reviews and external inspections.
• Collaborate with IT Infra and Data Platform teams on system change requests.

Skills

Regulatory compliance

IT GRC

Risk management

Policy drafting

Education

Bachelor's degree in computer science or information systems

Tools

COBIT

ITIL

ISO 27001

ISO 27701

PCI-DSS

NIST

Job description

Indodana Fintech in Jakarta seeks an IT GRC Compliance professional to assist in drafting internal policies and procedures in line with POJK, GDPR, and global standards. You will enforce IT GRC policies and work with IT infra and data teams on governance initiatives.

The role requires knowledge of cybersecurity standards and regulatory frameworks, with a focus on risk assessment and audit support across the organization.