IT GRC Manager – Digital Identity & ISO 27001 Lead

Lever, Inc.; Jakarta Pusat; On-site; IDR 600,000,000 - 900,000,000; Full time

Job summary

Lever, Inc. is seeking an IT GRC Manager to lead the development and execution of a governance, risk, and compliance framework focused on identity services.

You will drive ISO 27001 and ISO 27701 readiness, bridge policy and practice, and monitor internal controls to support strategic objectives. Within six months you will strengthen the risk posture, influence policy reforms, and coordinate with legal, security, and product teams to embed security controls across lending and identity products,

Qualifications

• Minimum of 5 years in IT governance, risk management, and compliance.
• Experience with ISO 27001/27701, PSrE and COBIT/ITIL.
• Proven track record leading ISO 27001/27701 certifications.
• Excellent stakeholder management and communication at all levels.
• Experience navigating regulatory audits.
• Ability to lead a small team and foster collaboration.

Responsibilities

• Coordinating with compliance to ensure initiatives meet internal and external standards.
• Evaluate policy implementation and maintain risk mitigation.
• Act as SME to address IT GRC requirements for lending & identity products/services.
• Ensure governance, risk management, and compliance across the organization.
• Develop and maintain IT and business process governance related documents.
• Coordinate with IT units to follow up on data requests, audits, and regulators.
• Develop processes to safeguard or archive IT development documents.
• Implement governance using ISO27001, ISO27701 and related best practices.

Skills

IT governance

Risk management

Compliance

Stakeholder management

Leadership

Audits

Tools

ISO 27001

ISO 27701

ITIL

COBIT

Job description

Lever, Inc. is seeking an IT GRC Manager to lead the development and execution of a governance, risk, and compliance framework focused on identity services.

You will drive ISO 27001 and ISO 27701 readiness, bridge policy and practice, and monitor internal controls to support strategic objectives. Within six months you will strengthen the risk posture, influence policy reforms, and coordinate with legal, security, and product teams to embed security controls across lending and identity products,