IT GRC Lead — Security, Policy & Compliance

Cermati Fintech Group; Jakarta Pusat; Presencial; IDR 30 000 000 - 60 000 000; Tempo integral

Resumo da oferta

Indodana Fintech is seeking a senior IT GRC professional to lead governance, risk, and compliance initiatives in Indonesia. You will collaborate with security, legal, and compliance teams to define and implement company-wide IT policies while aligning with regulatory requirements.

The role requires 4–8 years in IT governance, strong leadership, and excellent communication skills. A CISSP/CISA or higher degree is a plus, with ISO 27001, SOC 2, and POJK/UU PDP knowledge highly valued.

Qualificações

• Bachelor's degree in computer science or related field, or equivalent work experience.
• Strong logical and problem-solving skills.
• Excellent verbal and written communication and organizational skills.
• Have leadership and negotiation skills.
• Knowledge of cybersecurity standards such as ISO 27001, PCI-DSS, and SOC2.
• Knowledge of POJK and UU PDP regulations.
• Knowledge of cybersecurity frameworks.
• 4–8 years of IT governance experience preferred.
• Advanced degree or cybersecurity certification (CISSP, CISA) is a plus.
• Having Protection Officer certification is a plus.

Responsabilidades

• Make recommendations to senior management to create IT GRC policies that would improve internal control and security posture of the company while satisfying the consideration of all stakeholders including business users, HR, compliance, legal, etc
• Become the main PIC to drive change management and implementation for IT GRC policies.
• Become the main PIC for communicating things related to IT Security, Risk, Governance and Compliance for both internal and external stakeholders.
• Work closely with senior management personnel across the organization to understand the organization’s contexts, strategy and governance needs to adapt policies accordingly
• Liaising with stakeholders to design effective governance policies for company operations and regulatory compliance
• Working with the security, data, compliance, and legal teams to redefine the requirements of our systems’ implementation and processes
• Overseeing the implementation of the governance policies across the organization
• Contributing to the improvements of the company’s security policies and processes

Conhecimentos

Leadership

Negotiation

Cybersecurity Standards

ISO 27001

PCI-DSS

SOC 2

POJK

UU PDP

Cybersecurity Frameworks

Governance

Formação académica

Bachelor's degree in CS or related

Descrição da oferta de emprego

Indodana Fintech is seeking a senior IT GRC professional to lead governance, risk, and compliance initiatives in Indonesia. You will collaborate with security, legal, and compliance teams to define and implement company-wide IT policies while aligning with regulatory requirements.

The role requires 4–8 years in IT governance, strong leadership, and excellent communication skills. A CISSP/CISA or higher degree is a plus, with ISO 27001, SOC 2, and POJK/UU PDP knowledge highly valued.