IT GRC Manager - Digital Identity

GoTo Financial; Jakarta Utara; On-site; IDR 400,000,000 - 800,000,000; Full time

Job summary

GoTo Financial is seeking an IT GRC Manager to lead the design and deployment of a robust governance, risk and compliance framework for our identity services products. You will bridge policy and practice, monitor internal controls, and drive readiness for ISO 27001 and ISO 27701 certifications as well as regulatory audits.

In six months you will strengthen the risk posture, influence policy reforms, and build a resilient organization capable of withstanding evolving cyber threats.

Qualifications

• Minimum 5 years of experience in IT governance, risk management, and compliance.
• Strong experience with ISO 27001/ISO 27701, ITIL, and COBIT.
• Proven track record leading certifications such as ISO 27001 and ISO 27701.
• Excellent stakeholder management and ability to influence at all levels.
• Experience navigating regulatory audits.

Responsibilities

• Coordinating with the compliance team to ensure that every initiative, development, and collaboration complies with the standards and regulations (internal and external).
• Conduct routine evaluation of policies and procedures implementation and ensure best-practice risk mitigation and assessment functions are maintained to comply with the company's strategy.
• Act as a Subject Matter Expert to the stakeholders and provide relevant & applicable consultation for addressing the IT GRC requirement in lending & identity product & services.
• Ensure effective governance, risk management, and compliance across the organization.
• Develop and maintain compliance, governance, and risk-related IT and business process flow.
• Coordinate with related IT work units to follow up on data requests and internal audit findings, external audits, and regulators.
• Develop the process and conduct the activities to safeguard or archive every IT development document regularly.
• Implement a good governance organization using ISO27001, ISO 27701, and other relevant Technology & Security best practices.

Skills

IT governance

risk management

compliance

ISO 27001

ISO 27701

ITIL

COBIT

stakeholder management

regulatory audits

Job description

The IT GRC Manager will spearhead the development and implementation of a robust governance, risk, and compliance framework, specifically tailored to our identity services products. Tasked with bridging the gap between policy and practice, the Manager will monitor the execution of internal controls and evaluate their efficacy in meeting strategic objectives. A primary focus involves driving the organization toward ISO 27001 and ISO 27701 certifications while ensuring continuous readiness for regulatory audits.

Within the first six months, the successful candidate will be expected to fortify the company’s risk posture and influence critical IT policy reforms, ultimately enhancing organizational resilience against an evolving cyber threat landscape.

What You Will Do

• Coordinating with the compliance team to ensure that every initiative, development, and collaboration complies with the standards and regulations (internal and external);
• Conduct routine evaluation of policies and procedures implementation and ensure best-practice risk mitigation and assessment functions are maintained to comply with the company's strategy;
• Act as a Subject Matter Expert to the stakeholders and provide relevant & applicable consultation for addressing the IT GRC requirement in lending & identity product & services;
• Ensure effective governance, risk management, and compliance across the organization;
• Develop and maintain compliance, governance, and risk-related IT and business process flow;
• Coordinate with related IT work units to follow up on data requests and internal audit findings, external audits, and regulators;
• Develop the process and conduct the activities to safeguard or archive every IT development document regularly;
• Implement a good governance organization using ISO27001, ISO 27701, and other relevant Technology & Security best practices.

What You Will Need

• Minimum of 5 years of experience in IT governance, risk management, and compliance;
• Having excellent experience with PSrE, ISO 27001, ISO27701, ITIL, and COBIT;
• Proven track record of successfully leading and achieving certifications such as ISO 27001 and ISO 27701;
• Excellent stakeholder management skills, with the ability to communicate and influence at all levels of the organization;
• Demonstrated ability to deliver results with limited resources and minimal supervision;
• Extensive experience in managing and navigating regulatory audits and ensuring compliance with industry standards;
• Strong leadership skills with the ability to effectively lead a small team and foster a collaborative work environment;
• Strong adaptability and flexibility to take on new areas of responsibility and lead new functions, while effectively leveraging existing skills, knowledge, and experience;
• One or more of the following or equivalent certifications preferred: CISA, CISM, CRISC, ITIL, COBIT, and ISO 27001 LA is preferred.

About The Team

The GTF IT GRC team consists of dedicated specialists who support our technical operations for lending and identity services. You will find a culture that values mentorship, clear communication, and collective problem-solving. We believe that GRC is most effective when it’s collaborative, not just corrective.

In this team, you will be the primary liaison between several key pillars of the organization:

Engineering & Tech: You’ll partner with our engineers to ensure that security controls are "baked in" to our lending and identity platforms from day one.

Legal & Regulatory: You’ll work alongside our compliance experts to translate complex financial laws into clear, actionable IT policies.

People & Partner Teams: You’ll collaborate to foster a company-wide culture of security, ensuring that every employee and third-party partner understands their role in protecting our ecosystem.

About GoTo Group

GoTo is the largest digital ecosystem in Indonesia. GoTo's mission is 'empower progress' by offering technology infrastructure and solutions that help everyone to access and thrive in the digital economy.

The GoTo ecosystem provides a wide range of services, including mobility, delivery, payments, financial services, and technology solutions for merchants. The ecosystem also provides e-commerce services through Tokopedia and banking services through its partnership with Bank Jago.

About Gojek

Gojek is Southeast Asia’s leading on-demand platform and pioneer of the multi-service ecosystem with over 2.5 million driver partners across the regions offering a wide range of services such as transportation, food delivery, logistics and more. With its mission to create impact at scale, Gojek is committed to resolving consumer problems and raising standards of living by connecting consumers to the best providers of goods and services in the market.

About GoTo Financial

GoTo Financial accelerates financial inclusion through its leading financial services and merchants solutions. Its consumer services include GoPay and GoPayLater and serve businesses of all sizes through Midtrans, Moka, GoBiz Plus, GoBiz, and Selly. With its trusted and inclusive ecosystem of products, GoTo Financial is open to new growth opportunities and aims to empower everyone to Make It Happen, Make It Together, Make It Last.

Imagine having a beautiful product that you create being launched to the public. Then visualize more than 55 million active users, over 14 million merchants, and more than 2.5 million driver partners benefiting from it: greater efficiency, easier access to financial services, better earnings, and more.

GoTo Financial is part of the GoTo ecosystem, a unique combination of on-demand mobility services Gojek, e-commerce platform Tokopedia, and comprehensive fintech platform GoTo Financial. This massive and integrated ecosystem enables you to work on projects that impact the lives of millions, ranging from:

1- Bringing the unbanked into formal financial system by helping them open a digital bank account with GoPay-Jago

2- Providing seamless cashless payment method in GoPay and GoPayLater to merchants and consumers,

3- Giving consumers and merchants access to responsible lending, insurance and investment products,

4- Helping offline and online merchants reap the benefits of the digital economy through Midtrans payment gateway, webstore builder GoStore, keyboard app for online sellers Selly, and point-of-sales solutions MOKA and GoKasir,

5- Supporting food merchants in simplifying their operations with GoBiz and GoBiz Plus, to

6- Creating other use cases that empower consumers and merchants to manage all money-related matters.

So join our ride to bring the benefit of the digital economy to all. We’re just getting started!

Imagine having a beautiful product that you create being launched to the public. Then visualize more than 55 million active users, over 14 million merchants, and more than 2.5 million driver partners benefiting from it: greater efficiency, easier access to financial services, better earnings, and more.

GoTo Financial is part of the GoTo ecosystem, a unique combination of on-demand mobility services Gojek, e-commerce platform Tokopedia, and comprehensive fintech platform GoTo Financial. This massive and integrated ecosystem enables you to work on projects that impact the lives of millions, ranging from:

1- Bringing the unbanked into formal financial system by helping them open a digital bank account with GoPay-Jago

2- Providing seamless cashless payment method in GoPay and GoPayLater to merchants and consumers,

3- Giving consumers and merchants access to responsible lending, insurance and investment products,

4- Helping offline and online merchants reap the benefits of the digital economy through Midtrans payment gateway, webstore builder GoStore, keyboard app for online sellers Selly, and point-of-sales solutions MOKA and GoKasir,

5- Supporting food merchants in simplifying their operations with GoBiz and GoBiz Plus, to

6- Creating other use cases that empower consumers and merchants to manage all money-related matters.

So join our ride to bring the benefit of the digital economy to all. We’re just getting started!