IT GRC Specialist - Vendor & Access Compliance

Kredivo Group

Jakarta Pusat

On-site

IDR 180,000,000 - 300,000,000

Full time

4 days ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

Kredivo Group is seeking an IT GRC professional to run vendor security assessments and user access reviews across all Group entities. You will support IT audits with evidence and follow‑up, under senior guidance, and grow into greater ownership.

You’ll review vendor contracts for information security terms, maintain inventories, and drive continuous compliance as tooling matures. Strong communication in English and Bahasa Indonesia is required.

Qualifications

Bachelor’s degree in IT, CS, Cybersecurity, or related field.
3–5 years in IT GRC, IT audit, or information security, preferably fintech/banking.
Hands-on experience with access reviews or vendor risk assessments.
Knowledge of ISO 27001, NIST CSF, COBIT and local regulations (OJK, Bank Indonesia).
Experience supporting audits and preparing evidence.

Responsibilities

Run vendor security assessments and user access reviews across all Group entities.
Ensure vendor contracts include required information security terms.
Maintain vendor inventory and remediation records.
Improve automation for vendor assessments.
Run periodic access reviews; verify least privilege.
Log exceptions and track closure.
Support IT audits (ITGC, ISO 27001, OJK, BI) with evidence.
Track findings on audit board and follow up with owners.
Support Security Awareness with compliance tracking.
Report reviews completed, overdue items, and vendor risk ratings.