IT GRC Leader - Security, Risk & Compliance

Cermati Fintech Group; Jakarta Pusat; On-site; IDR 250,000,000 - 420,000,000; Full time

Job summary

Indodana Fintech in Indonesia seeks an IT GRC policy specialist to lead governance and security policy initiatives. You will drive change management, communicate governance needs, and collaborate with security, data, compliance and legal teams to align policies with regulatory requirements.

Role requires 4–8 years in IT governance, knowledge of ISO 27001, PCI-DSS, SOC2, and related regulations. A proactive leader with strong negotiation skills will fit well in this fast-growing fintech

Qualifications

• Bachelor's degree in computer science or related field, or equivalent work experience.
• Strong logical and problem solving skills.
• Excellent verbal and written communication and organizational skills.
• Have leadership and negotiation skills.
• Knowledge of cybersecurity standards such as ISO 27001, PCI-DSS, and SOC2.
• Knowledge of POJK and UU PDP regulations.
• Knowledge of cybersecurity frameworks.
• 4–8 years in IT governance/IT risk management preferred.
• Advanced degree or certifications (CISSP, CISA) preferred.
• Protection Officer certification is a plus.

Responsibilities

• Make recommendations to senior management to create IT GRC policies that would improve internal control and security posture.
• Become the main PIC to drive change management and implementation for IT GRC policies.
• Communicate IT Security, Risk, Governance and Compliance to internal and external stakeholders.
• Work closely with senior management to understand contexts, strategy and governance needs.
• Liaise with stakeholders to design effective governance policies for operations and regulatory compliance.
• Collaborate with security, data, compliance and legal teams to define system requirements.
• Oversee the implementation of governance policies across the organization.
• Contribute to improvements of the company’s security policies and processes.

Skills

Logical thinking

Problem solving

Leadership

Negotiation

ISO/PCI/SOC2

POJK PDP

Cybersecurity frameworks

Education

Bachelor's in CS or related field

Advanced degree or certs (CISSP, CISA)

Job description

Indodana Fintech in Indonesia seeks an IT GRC policy specialist to lead governance and security policy initiatives. You will drive change management, communicate governance needs, and collaborate with security, data, compliance and legal teams to align policies with regulatory requirements.

Role requires 4–8 years in IT governance, knowledge of ISO 27001, PCI-DSS, SOC2, and related regulations. A proactive leader with strong negotiation skills will fit well in this fast-growing fintech