Junior IT GRC & Compliance Specialist (Fintech)

Cermati Fintech Group; Jakarta Pusat; On-site; IDR 334,800,000 - 613,800,000; Full time

Job summary

Indodana Fintech is seeking an IT GRC Compliance Specialist to assist in researching regulatory updates and drafting internal policies. You will design and enforce IT GRC policies aligned with global frameworks and financial regulations, gathering input from HR, Legal, and Business Units to strengthen controls.

The role emphasizes risk assessment and cross-department coordination. You will work with IT Infra, Information Security, and Data Platform teams to ensure day-to-day operations meet

Qualifications

• Bachelor's degree in computer science, information systems, related fields, or equivalent work experience.
• Working experience as Compliance & Information Security, IT Governance, Risk, and Compliance (IT GRC), Risk Management or IT Auditor in financial services or banking is a plus.
• Good logical analysis & problem solving skills.
• Excellent verbal/written communication & organizational skills.
• Leadership, execution & process orientation with negotiation skills.
• Knowledge of cybersecurity standards such as ISO 27001, ISO 27701, PCI-DSS, and NIST 2.
• Knowledge of regulations such as POJK, PBI LPBBTI and UU PDP, GDPR,
• Knowledge of IT Governance framework such as COBIT, ITIL
• Knowledge of cybersecurity frameworks
• Good understanding of legal principles, personal data protection laws, or obtaining Data Protection Officer certification is a plus

Responsibilities

• Assist in researching regulatory updates, industry best practices, and IT GRC benchmarks to support senior team members in drafting internal policy & procedure proposals.
• Design, update and enforce IT GRC policies aligned with financial sector regulations and global frameworks (COBIT 2019, ISO 27001, ISO 27701 ISO 31000, GDPR).
• Gather, organize, and summarize input and operational pain points from various Departments (HR, Legal, Business Units) regarding existing IT compliance & security practices.
• Assist in drafting core SOPs, updating governance policies, and maintaining regulatory compliance checklists.
• Identify & map proposed internal controls against existing cross-departments workflows to identify potential operational friction before policies are finalized.
• Assist in identifying all relevant risks in IT related activity tasks, collect, manage and conduct IT risk control self assessment to prevent and define risk mitigation proposals.
• Collect, organize, and verify audit evidence for internal reviews and external regulatory inspections (audit support internal team).
• Work with IT Infrastructure, IT Information & Security, and Data Platform teams to log, review, and track system change requests.
• Conduct routine checks to ensure day-to-day operations & business implementation are aligned with IT governance implementation on financial industry standards.
• Become a support PIC to drive change management and implementation for IT GRC policies.
• Become a support PIC for communicating IT Security, IT Risk Management, Governance and Compliance to internal and external stakeholders.
• Collaborate with mid and senior management to understand context, strategy, and governance needs and adapt policies accordingly.

Skills

Analytical thinking

Communication skills

Leadership

Negotiation skills

Problem solving

Education

Bachelor's degree in computer science or information systems

Job description

Indodana Fintech is seeking an IT GRC Compliance Specialist to assist in researching regulatory updates and drafting internal policies. You will design and enforce IT GRC policies aligned with global frameworks and financial regulations, gathering input from HR, Legal, and Business Units to strengthen controls.

The role emphasizes risk assessment and cross-department coordination. You will work with IT Infra, Information Security, and Data Platform teams to ensure day-to-day operations meet