Junior IT GRC & Compliance Specialist

Stie Yai; Jakarta Pusat; On-site; IDR 120,000,000 - 180,000,000; Full time

Job summary

Stie Yai in Jakarta is looking for a Governance, Risk and Compliance (GRC) professional to support senior teams in researching regulatory updates and drafting internal IT policy proposals for the fintech sector. This role focuses on aligning policies with COBIT 2019, ISO standards, GDPR, and local POJK/PBI regulations.

You will gather inputs from HR, Legal, and business units, help map internal controls to workflows, and assist in IT risk assessments and audit evidence preparation.

Qualifications

• Bachelor's degree in computer science, information systems, or related field.
• Experience in Compliance & Information Security, IT GRC, Risk Management, or IT Auditing in financial services or banking is a plus.

Responsibilities

• Assist in researching regulatory updates, industry best practices, and IT GRC benchmarks to support senior team members in drafting internal policy and procedure proposals.
• Design, update, and enforce IT GRC policies aligned with obligations and global frameworks such as COBIT 2019, ISO 27001, ISO 27701, ISO 31000, and GDPR.
• Gather, organize, and summarize input from HR, Legal, and Business Units regarding existing IT compliance and security practices.
• Draft core SOPs, update governance policies, and maintain regulatory compliance and control checklists following POJK and PBI regulations.
• Identify and map proposed internal controls to cross-department workflows to detect operational friction.
• Assist in identifying IT-related risks and propose risk mitigation strategies.
• Collect, organize, and verify audit evidence for internal reviews and external regulatory inspections.
• Collaborate with IT teams to log, review, and track system change requests and understand IT infrastructure and data governance.

Skills

COBIT knowledge

ITIL knowledge

Education

Bachelor's degree in computer science

Job description

Stie Yai in Jakarta is looking for a Governance, Risk and Compliance (GRC) professional to support senior teams in researching regulatory updates and drafting internal IT policy proposals for the fintech sector. This role focuses on aligning policies with COBIT 2019, ISO standards, GDPR, and local POJK/PBI regulations.

You will gather inputs from HR, Legal, and business units, help map internal controls to workflows, and assist in IT risk assessments and audit evidence preparation.