Junior IT Governance

Indodana; Jakarta Pusat; On-site; IDR 167,400,000 - 312,480,000; Full time

Benefits offered by this job

Restaurant d'entreprise

Indemnités de stage/alternance

Job summary

Indodana is seeking an IT GRC Coordinator to help shape and enforce governance policies in a fintech environment. You will assist in drafting procedures, aligning with financial sector standards, and coordinating with IT, Legal, and HR teams in Jakarta.

You will map controls, assess risks, and support audits while working with mid and senior management to tailor governance to our business context and regulatory needs.

Qualifications

• Bachelor's degree in computer science, information systems, or related field or equivalent.
• Experience in IT GRC, governance, risk management or IT auditing in financial services is a plus.
• Strong analytical and problem-solving abilities.
• Excellent verbal and written communication skills with good organization.
• Leadership, execution mindset, and process orientation; negotiation skills helpful.
• Knowledge of ISO 27001, ISO 27701, PCI-DSS, and NIST 2.
• Familiarity with POJK, PBI LPBBTI, UU PDP and GDPR.
• Understanding of COBIT and ITIL frameworks; cybersecurity frameworks.
• Data protection principles; DPO certification is a plus.

Responsibilities

• Assist in researching regulatory updates and IT GRC benchmarks for internal policy proposals.
• Design, update and enforce IT GRC policies aligned with regulations and global frameworks.
• Gather input from HR, Legal, and Business Units on IT compliance practices.
• Draft core SOPs, update governance policies, and maintain compliance checklists.
• Map internal controls to cross-department workflows to reduce friction.
• Identify IT-related risks and support risk assessments and mitigation proposals.
• Collect and verify audit evidence for internal reviews and external inspections.
• Collaborate with IT Infra, InfoSec and Data Platform on change requests.
• Ensure day-to-day operations align with IT governance in financial standards.
• Support change management and communications on IT security and risk governance.
• Work with senior management to adapt policies to context and strategy.

Skills

Analytical thinking

Problem solving

Communication

Organizational skills

Leadership

Negotiation

Execution

Process orientation

Cybersecurity knowledge

IT governance

Regulatory knowledge

Cybersecurity frameworks

Education

Bachelor's degree in CS/IS or related

Job description

Company Description

Indodana Fintech is an OJK-licensed financial technology company that operates a credit marketplace for peer-to-peer loans. Our mission is to achieve financial inclusion by enabling lenders to provide loans to the 100 million underbanked Indonesians. Leveraging sophisticated big data and artificial intelligence technologies, we connect hundreds of lenders with creditworthy borrowers every day.

Our team hailed from Silicon Valley Tech companies such as Google, Microsoft, LinkedIn and Sofi as well as Indonesian startups such as Doku, Touchten. We have graduates from well known universities such as Universitas Indonesia, ITB, Stanford, University of Washington, Cornell and many others. We are building a company with the same culture of openness, transparency, drive and meritocracy as Silicon Valley companies. Join us in our cause to build a world class fintech company in Indonesia.

Job Description

1. Assist in researching regulatory updates, industry best practices, and IT GRC benchmarks to support senior team members in drafting any internal policy & procedure proposals.
2. Design, update and enforce IT GRC policies aligned with financial sector regulations and global frameworks (COBIT 2019, ISO 27001, ISO 27701 ISO 31000, GDPR)
3. Gather, organize, and summarize input and operational pain points from various Departments (HR, Legal, Business Units) regarding existing IT compliance & security common practices.
4. Assist in drafting core SOPs, updating governance policies, and maintaining regulatory compliance checklists, while control checklists designed to improve daily internal IT GRC culture, following POJK, PBI regarding IT implementation on Fintech Industry.
5. Identify & help map proposed internal controls against existing cross-departments workflows to identify potential operational friction before policies are finalized.
6. Assist in identifying all relevant risks in IT related activity tasks, collect, manage and conduct IT risk control self assessment to prevent and define risk mitigation designed proposals.
7. Collect, organize, and verify audit evidence for internal reviews and external regulatory inspections (audit support internal team).
8. Work with IT Infrastructure, IT Information & Security, and Data Platform teams to log, review, and track system change requests. That's a good value to understand and know in general (at least) regarding IT Infra Info-sec and data governance implementation.
9. Conduct routine checks to ensure day-to-day operations & business implementation are aligned with IT governance implementation on financial industry standards.
10. Become a support PIC to drive any change management and implementation for IT GRC policies.
11. Become a support PIC for communicating things related to IT Security, IT Risk Management, Governance and Compliance for both internal and external stakeholders.
12. Working closely and supporting execution tasks with mid and senior management personnel across the organization to understand the organization's contexts, strategy and governance needs to adapt policies accordingly.

Qualifications

1. Bachelor's degree in computer science, information systems, related fields, or equivalent work experience
2. Working experience as Compliance & Information Security, IT Governance, Risk, and Compliance (IT GRC), Risk Management or IT Auditor in the financial service industry or banking or a similar company in governance roles is a plus
3. Good logical analysis & problem solving skills
4. Excellent verbal/written communication & organizational skills
5. Leadership, execution & process oriented and negotiation skills
6. Knowledge of cybersecurity standards such as ISO 27001, ISO 27701, PCI-DSS, and NIST 2
7. Knowledge of regulations such as POJK, PBI LPBBTI and UU PDP, GDPR,
8. Knowledge of IT Governance framework such as COBIT, ITIL
9. Knowledge of cybersecurity frameworks
10. Good understanding of legal principles, personal data protection laws, or obtaining Data Protection Officer certification is a plus