This position will responsible to perform risk-based audits covering IT governance, cybersecurity, IT systems and controls, as well as insurance business operations and processes. Provide objective assurance and practical recommendations to strengthen internal controls, regulatory compliance, operational efficiency, and risk management while maintaining Internal Audit independence and professional standards.
Minimal Educational Background
- Bachelor’s degree (S1) in Information Technology, Computer Science, Information Systems, Cybersecurity, Accounting/Information Systems or a relevant discipline. A postgraduate degree is an advantage.
Working Experience
- At least 6 years’ relevant experience in IT audit, IT risk, cybersecurity assurance or IT controls, including at least 2 years leading audits, projects or teams.
- Experience in financial services, preferably Insurance or a regulated environment is preferred.
Other Specific Requirement
- CISA or CIA preferred; CISSP, CISM, CRISC, or other relevant professional certifications are advantageous.
- AAAIK or AAMAI certification is preferred.
- Strong understanding of risk-based internal auditing, IIA Global Internal Audit Standards, internal control frameworks, risk management, and corporate governance principles.
- Good understanding of IT governance, cybersecurity, IT general controls (ITGC), application controls, access management, system development, business continuity, and relevant frameworks such as COBIT, ISO/IEC 27001, and NIST CSF.
- Good understanding of general insurance business processes, including underwriting, policy administration, claims management, insurance distribution, commission payments, and related internal controls.
- Knowledge of applicable OJK regulations, insurance industry requirements, personal data protection, and relevant Indonesian regulatory obligations.
- Proficient in Microsoft Excel and Data analytics, with knowledge of SQL, Python, or other audit analytics tools considered an advantage.
- Strong analytical thinking, professional judgement, problem-solving, audit documentation, report writing, and stakeholder communication skills.
- Ability to plan and manage multiple audit engagements, supervise audit teams, coordinate with stakeholders, and deliver audit assignments within established timelines.
- Proficient in Bahasa Indonesia with good working proficiency in English. Demonstrates high integrity, confidentiality, objectivity, independence, and professional ethics.