Lead IT Audit & Risk – Cybersecurity & Controls

GoTo Group; Jakarta Pusat; On-site; IDR 600,000,000 - 900,000,000; Full time

Job summary

GoTo Group in Indonesia seeks a Lead Internal Auditor - IT with expertise in risk-based IT audits across infrastructure, cloud, and governance. You will assess IT controls, cybersecurity, data governance, and incident management, driving actionable findings and stakeholder remediation.

Minimum 6–8 years in IT audit or related fields, with strong knowledge of IT controls and regulatory expectations. The role partners with Technology, InfoSec, Risk, and Compliance teams.

Qualifications

• 6–8 years of experience in IT audit, technology risk, information security audit, or related assurance functions.
• Strong experience in IT general controls, application controls, cybersecurity, IT operations, cloud technology, data governance, and technology risk management.
• Familiarity with COBIT, ISO 27001, NIST or similar frameworks; CISA certification is mandatory.

Responsibilities

• IT & Risk-Based Audit Execution: Plan and execute risk-based IT audits covering technology infrastructure, applications, cloud environments, IT operations, and technology governance.
• IT Controls Assessment: Assess IT general controls, application controls, access management, change management, incident management, and other key technology processes.
• Cybersecurity & Technology Risk: Evaluate cybersecurity, information security, vulnerability management, business continuity, disaster recovery, and other technology-related risks.
• Data & System Audit: Assess data governance, data integrity, system interfaces, data flows, and controls over critical systems and information assets.
• Audit Planning & Fieldwork: Conduct risk assessments, define audit procedures, perform walkthroughs and control testing, analyze evidence, and maintain audit documentation.
• Reporting & Recommendations: Develop clear audit findings, identify root causes and impacts, and provide practical recommendations to strengthen IT controls and mitigate technology risks.
• Stakeholder & Remediation Management: Work with Technology, Information Security, Risk, Compliance, and business stakeholders to validate findings and monitor remediation.

Skills

IT Audit

Technology Risk

Stakeholder Management

Analytical Skills

Regulatory Knowledge

Education

CISA Certification

Tools

COBIT framework

ISO 27001

NIST

Job description

GoTo Group in Indonesia seeks a Lead Internal Auditor - IT with expertise in risk-based IT audits across infrastructure, cloud, and governance. You will assess IT controls, cybersecurity, data governance, and incident management, driving actionable findings and stakeholder remediation.

Minimum 6–8 years in IT audit or related fields, with strong knowledge of IT controls and regulatory expectations. The role partners with Technology, InfoSec, Risk, and Compliance teams.