Junior IT Governance

Stie Yai; Jakarta Pusat; On-site; IDR 120,000,000 - 180,000,000; Full time

Job summary

Stie Yai in Jakarta is looking for a Governance, Risk and Compliance (GRC) professional to support senior teams in researching regulatory updates and drafting internal IT policy proposals for the fintech sector. This role focuses on aligning policies with COBIT 2019, ISO standards, GDPR, and local POJK/PBI regulations.

You will gather inputs from HR, Legal, and business units, help map internal controls to workflows, and assist in IT risk assessments and audit evidence preparation.

Qualifications

• Bachelor's degree in computer science, information systems, or related field.
• Experience in Compliance & Information Security, IT GRC, Risk Management, or IT Auditing in financial services or banking is a plus.

Responsibilities

• Assist in researching regulatory updates, industry best practices, and IT GRC benchmarks to support senior team members in drafting internal policy and procedure proposals.
• Design, update, and enforce IT GRC policies aligned with obligations and global frameworks such as COBIT 2019, ISO 27001, ISO 27701, ISO 31000, and GDPR.
• Gather, organize, and summarize input from HR, Legal, and Business Units regarding existing IT compliance and security practices.
• Draft core SOPs, update governance policies, and maintain regulatory compliance and control checklists following POJK and PBI regulations.
• Identify and map proposed internal controls to cross-department workflows to detect operational friction.
• Assist in identifying IT-related risks and propose risk mitigation strategies.
• Collect, organize, and verify audit evidence for internal reviews and external regulatory inspections.
• Collaborate with IT teams to log, review, and track system change requests and understand IT infrastructure and data governance.

Skills

COBIT knowledge

ITIL knowledge

Education

Bachelor's degree in computer science

Job description

Your Role

Here’s what you will be doing:

• Assist in researching regulatory updates, industry best practices, and IT GRC benchmarks to support senior team members in drafting internal policy and procedure proposals.
• Design, update, and enforce IT GRC policies aligned with financial sector regulations and global frameworks such as COBIT 2019, ISO 27001, ISO 27701, ISO 31000, and GDPR.
• Gather, organize, and summarize input and operational pain points from various departments including HR, Legal, and Business Units regarding existing IT compliance and security practices.
• Assist in drafting core SOPs, updating governance policies, and maintaining regulatory compliance and control checklists following POJK and PBI regulations related to IT implementation in the fintech industry.
• Identify and help map proposed internal controls against existing cross-department workflows to detect potential operational friction before finalizing policies.
• Assist in identifying IT-related risks, conduct IT risk control self-assessments, and propose risk mitigation strategies.
• Collect, organize, and verify audit evidence for internal reviews and external regulatory inspections to support audit teams.
• Collaborate with IT Infrastructure, IT Information & Security, and Data Platform teams to log, review, and track system change requests, gaining understanding of IT infrastructure, information security, and data governance implementation.
• Conduct routine checks to ensure daily operations and business implementations align with IT governance standards in the financial industry.
• Serve as a support person in driving change management and implementation of IT GRC policies.
• Support communication related to IT Security, IT Risk Management, Governance, and Compliance for internal and external stakeholders.
• Work closely with mid and senior management across the organization to understand context, strategy, and governance needs to adapt policies accordingly.

About You

The company is looking for:

• Bachelor's degree in computer science, information systems, related fields, or equivalent work experience.
• Experience in Compliance & Information Security, IT Governance, Risk and Compliance (IT GRC), Risk Management, or IT Auditing in financial services, banking, or similar governance roles is a plus.
• Strong logical analysis and problem-solving skills.
• Excellent verbal and written communication and organizational skills.
• Leadership, execution, process orientation, and negotiation skills.
• Knowledge of cybersecurity standards such as ISO 27001, ISO 27701, PCI-DSS, and NIST 2.
• Familiarity with regulations including POJK, PBI LPBBTI, UU PDP, and GDPR.
• Understanding of IT Governance frameworks such as COBIT and ITIL.
• Knowledge of cybersecurity frameworks.
• Good understanding of legal principles and personal data protection laws; Data Protection Officer certification is a plus.