IT Risk & Governance Officer

LG Sinar Mas (LGSM); Jakarta Pusat; On-site; IDR 300,000,000 - 600,000,000; Full time

Job summary

LG Sinarmas Technology Solutions (LG Sinar Mas) seeks an IT Governance, Risk & Compliance professional in Jakarta to develop and maintain governance policies, risk registers, and compliance programs.

You will support Change Management, define KPI standards, and assist internal audit and PDP Law readiness ensuring ISO 27001:2022 and ISO 9001:2015 alignment.

The role requires 2–5 years in GRC or IT audit with strong policy writing and risk structuring, and ability to communicate clearly.

Qualifications

• 2–5 years of experience in IT Governance, Risk & Compliance (GRC) or IT audit.
• Working knowledge of ISO/IEC 27001:2022 and ISO 9001:2015.
• NIST CSF 2.0 familiarity is an advantage.
• Demonstrated ability to structure policy documents and risk registers.
• Strong written communication for policy, procedure, and audit documentation.

Responsibilities

• Develop and maintain IT governance policies, procedures, and standards.
• Build and maintain the IT Risk Register and Cybersecurity Risk Register, include risk appetite agreed with management.
• Support development of the Change Management framework (flow, policy, Change Advisory Board).
• Develop IT & Cybersecurity specific Performance Measurement & KPI standards.
• Run self-assessment and support Internal Audit/Compliance against ISO 27001:2022 and ISO 9001:2015; support PDP Law readiness.

Skills

IT governance

IT risk management

IT audit

Policy documentation

Risk registers

Job description

LG Sinarmas Technology Solutions (LG Sinar Mas) is a joint venture between LG CNS and SM+. The mission of LG Sinar Mas is to spread the advanced technologies of LG CNS, Korea's No. 1 IT service company, to Indonesia through synergy with the Sinarmas Group and become the best IT services company in Indonesia.

Responsibilities

• Develop and maintain IT governance policies, procedures, and standards (IT Governance &
• Build and maintain the IT Risk Register and Cybersecurity Risk Register, include risk appetite agreed with management.
• Support development of the Change Management framework (flow, policy, Change Advisory
• Board).
• Develop IT & Cybersecurity specific Performance Measurement & KPI standards.
• Run self-assessment and support Internal Audit/Compliance against ISO 27001:2022 and ISO 9001:2015; support PDP Law readiness.

Qualification

• 2-5 years' experience in IT Governance, Risk & Compliance (GRC) or IT audit.
• Working knowledge of ISO/IEC 27001:2022 and ISO 9001:2015; NIST CSF 2.0 familiarity is an advantage.
• Demonstrated ability to structure policy documents and risk registers.
• Strong written communication for policy, procedure, and audit documentation.