IT GRC Lead - Financial Services

Elitez Pte Ltd; Jakarta Utara; On-site; IDR 100.000.000 - 200.000.000; Full time

Job summary

A technology services firm in Jakarta Utara is seeking an experienced IT Governance Specialist to develop and implement IT governance frameworks and ensure compliance with regulations. The ideal candidate has a Bachelor's degree in IT and at least 5 years of experience in IT GRC or information security. Strong knowledge of frameworks like ISO 27001 and compliance requirements is essential. This role involves leadership and communication skills to work across departments.

Qualifications

• Minimum 5 years of experience in IT GRC, risk management, or information security.
• Familiar with local regulatory requirements in fintech or financial services.
• Certifications such as CISA, CISM, or CISSP are a plus.

Responsibilities

• Develop and implement IT governance frameworks, policies, and procedures.
• Identify and manage IT and cybersecurity risks across the organization.
• Ensure compliance with local and international regulations.
• Lead and coordinate internal and external IT audits.
• Conduct training and awareness programs on IT security and compliance.

Skills

IT GRC

Risk management

Information security

Communication

Leadership

Education

Bachelor's degree in IT, Computer Science, or related field

Tools

ISO 27001

COBIT

NIST

ITIL

Job description

Develop and implement IT governance frameworks, policies, and procedures.

Identify and manage IT and cybersecurity risks across the organization.

Ensure compliance with local and international regulations (e.g., ISO 27001, OJK, data privacy).

Lead and coordinate internal and external IT audits.

Maintain IT-related certifications and compliance documentation.

Work closely with other departments (IT, Legal, Operations) to align compliance goals.

Conduct training and awareness programs on IT security and compliance.

Requirements

Bachelor's degree in IT, Computer Science, or related field.

Minimum 5 years of experience in IT GRC, risk management, or information security.

Strong knowledge of frameworks like ISO 27001, COBIT, NIST, or ITIL.

Familiar with local regulatory requirements in fintech or financial services.

Experience in handling audits and compliance reporting.

Certifications such as CISA, CISM, or CISSP are a plus.

Strong communication and leadership skills.