A complete application in a minute — tailored resume and cover letter, ready to send.
PT GOTO GOJEK TOKOPEDIA TBK is seeking an IT GRC Manager to spearhead governance, risk, and compliance for identity services. You will bridge policy and practice, monitor internal controls, and drive certifications like ISO 27001 and ISO 27701 while staying audit-ready.
In six months, you will strengthen the organization’s risk posture and influence IT policy reforms, enhancing resilience against evolving cyber threats.
The IT GRC Manager will spearhead the development and implementation of a robust governance, risk, and compliance framework, specifically tailored to our identity services products. Tasked with bridging the gap between policy and practice, the Manager will monitor the execution of internal controls and evaluate their efficacy in meeting strategic objectives. A primary focus involves driving the organization toward ISO 27001 and ISO 27701 certifications while ensuring continuous readiness for regulatory audits.
Within the first six months, the successful candidate will be expected to fortify the company’s risk posture and influence critical IT policy reforms, ultimately enhancing organizational resilience against an evolving cyber threat landscape.
The GTF IT GRC team consists of dedicated specialists who support our technical operations for lending and identity services. You will find a culture that values mentorship, clear communication, and collective problem-solving. We believe that GRC is most effective when it’s collaborative, not just corrective.
In this team, you will be the primary liaison between several key pillars of the organization:
Engineering & Tech: You’ll partner with our engineers to ensure that security controls are "baked in" to our lending and identity platforms from day one.
Legal & Regulatory: You’ll work alongside our compliance experts to translate complex financial laws into clear, actionable IT policies.
People & Partner Teams: You’ll collaborate to foster a company-wide culture of security, ensuring that every employee and third-party partner understands their role in protecting our ecosystem.
GoTo is the largest digital ecosystem in Indonesia. GoTo's mission is to 'empower progress' by offering technology infrastructure and solutions that help everyone to access and thrive in the digital economy.
The GoTo ecosystem provides a wide range of services, including mobility, delivery, payments, financial services, and technology solutions for merchants. The ecosystem also provides e-commerce services through Tokopedia and banking services through its partnership with Bank Jago.
Gojek is Southeast Asia’s leading on-demand platform and pioneer of the multi-service ecosystem with over 2.5 million driver partners across the regions offering a wide range of services such as transportation, food delivery, logistics and more. With its mission to create impact at scale, Gojek is committed to resolving consumer problems and raising standards of living by connecting consumers to the best providers of goods and services in the market.
GoTo Financial accelerates financial inclusion through its leading financial services and merchants solutions. Its consumer services include GoPay and GoPayLater and serve businesses of all sizes through Midtrans, Moka, GoBiz Plus, GoBiz, and Selly. With its trusted and inclusive ecosystem of products, GoTo Financial is open to new growth opportunities and aims to empower everyone to Make It Happen, Make It Together, Make It Last.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.