IT Internal Audit

OttoDigital Group; Jakarta Pusat; On-site; IDR 1,800,000,000 - 3,000,000,000; Full time

Job summary

OttoDigital Group is seeking an IT Auditor to lead and coordinate IT audits across business units, ensuring audits align with scope and timelines.

The role focuses on auditing application systems, IT infrastructure, information security, and access controls, with on-site visits and actionable recommendations.

Qualifications

• Proven experience in IT auditing, IT operations, and/or cybersecurity.
• Strong understanding of COBIT, ISO 27001, ITIL, PCI-DSS, and NIST CSF.
• Banking or fintech sector knowledge preferred.
• Familiarity with OJK and BI regulations.
• Certifications such as CISA or ISO 27001 Lead Auditor/Implementer preferred.
• Internal audit certifications like QIA or CIA are a plus.
• Proficiency in Excel/Spreadsheets and data analysis.
• Report writing experience.
• Fraud investigation knowledge.
• Strong strategic thinking, analytical thinking, and creative problem-solving abilities.
• Excellent time management, effective communication, and teamwork.
• Confident presenting audit findings to stakeholders.

Responsibilities

• Formulating and scheduling effective IT audits across the designated scope and timelines.
• Executing foundational technical audits targeting application systems, IT infrastructure, information security, and access controls.
• Ensuring that all audit findings and corrective actions are addressed and resolved in a timely manner by the responsible business units.
• Drafting objective, evidence-based audit reports and delivering practical, impactful, and highly applicable strategic recommendations.
• Conducting on-site audit visits driven by specific cases or specialized requests.
• Proactively developing your skills and professional knowledge to adapt to evolving organizational and technological needs.

Skills

IT Auditing

Cybersecurity

Regulatory Knowledge

COBIT/ISO27001

PCI-DSS/NIST

Banking/Fintech domain

Data Analysis

Excel

Report Writing

Fraud Investigation

Communication

Team Collaboration

Presentation

Job description

Responsibilities

• Formulating and scheduling effective IT audits in alignment with the designated scope and timelines, and coordinating their implementation across all related business units.
• Executing foundational technical audits targeting application systems, IT infrastructure, information security, and access controls.
• Ensuring that all audit findings and corrective actions are addressed and resolved in a timely manner by the responsible business units.
• Drafting objective, evidence‑based audit reports and delivering practical, impactful, and highly applicable strategic recommendations.
• Conducting on‑site audit visits (field audits) driven by specific cases or specialized requests.
• Proactively developing your skills and professional knowledge to adapt to evolving organizational and technological needs.

Minimum Qualifications

• Proven experience working in IT Auditing, IT Operations, and/or Cybersecurity.
• Strong understanding of industry standards and frameworks, including COBIT, ISO 27001, ITIL, PCI‑DSS, and the NIST Cybersecurity Framework.
• Experience and a solid understanding of business processes within the Banking or Fintech sectors is highly preferred.
• Familiarity with regulatory frameworks and guidelines issued by OJK (Otoritas Jasa Keuangan) and/or BI (Bank Indonesia).
• Professional certifications such as CISA (Certified Information Systems Auditor) or ISO 27001 Lead Auditor/Implementer are highly preferred.
• Internal audit certifications like QIA (Qualified Internal Auditor) or CIA (Certified Internal Auditor) are a plus.
• Proficiency in Excel/Spreadsheets and Data Analysis.
• Proven capability in Report Writing (crafting clear, concise, and structured technical audit reports).
• Knowledge or experience in Fraud Investigation.
• Strong Strategic Thinking, Analytical Thinking, and Creative Problem‑Solving abilities.
• Excellent Time Management, Effective Communication, and team Collaboration skills.
• Confident in presenting audit findings to stakeholders.