IT GRC Specialist: Compliance, Audit & DRP

Lancesoft Indonesia; Jakarta Pusat; On-site; IDR 260,000,000 - 420,000,000; Full time

Job summary

Lancesoft Indonesia is seeking an IT Compliance & Governance professional to develop and enforce policies and controls across the organization in Jakarta. The role ensures alignment with ISO 27001, ISO 22301, and PCI DSS, and drives timely audit closures and risk mitigation.

The ideal candidate will have 3+ years’ experience in IT compliance, strong documentation skills, and the ability to train teams on governance and security practices.

Qualifications

• Bachelor's degree in IT or related field.
• 3+ years in IT compliance, governance, audit, or information security.
• Excellent analytical, documentation, and communication skills.
• Knowledge of IT GRC frameworks (COBIT, ISO 27001, ISO 22301, PCI DSS, or NIST).

Responsibilities

• Develop, maintain, and enforce IT policies aligned with ISO 27001, ISO 22301, and PCI DSS.
• Manage IT fixed assets, requests, devices, and disposal processes.
• Conduct internal compliance assessments and risk evaluations.
• Coordinate IT audit activities and close findings timely.
• Support business continuity planning and DR testing.
• Provide compliance advisory and training to IT and business teams.

Skills

IT Governance

Compliance & Audit

Information Security

Regulatory Standards

Documentation

Education

Bachelor's Degree in IT/CS/IS

Tools

COBIT

ISO 27001

ISO 22301

PCI DSS

NIST

Job description

Lancesoft Indonesia is seeking an IT Compliance & Governance professional to develop and enforce policies and controls across the organization in Jakarta. The role ensures alignment with ISO 27001, ISO 22301, and PCI DSS, and drives timely audit closures and risk mitigation.

The ideal candidate will have 3+ years’ experience in IT compliance, strong documentation skills, and the ability to train teams on governance and security practices.