Lead IT Auditor — Cybersecurity & Controls

Lever, Inc.; Jakarta Pusat; On-site; IDR 500,000,000 - 900,000,000; Full time

Job summary

GoTo is seeking an Internal Audit Lead (IT) to drive end-to-end risk-based IT audits across infrastructure, cloud, and data environments. You will collaborate with Technology, Security, Risk, and Compliance teams to identify control gaps and recommend improvements.

Ideal candidates have 6–8 years in IT audit or technology risk, strong knowledge of IT controls, cybersecurity, and data governance, plus a CISA certification.

Qualifications

• 6–8 years of IT audit or technology risk experience.
• Strong knowledge of IT controls, cybersecurity, data governance, and risk management.

Responsibilities

• Plan and execute risk-based IT audits across infrastructure, applications, cloud, and operations.
• Assess IT general controls and application controls, access, change, and incident management.
• Evaluate cybersecurity, information security, vulnerability management, and disaster recovery.
• Assess data governance, data integrity, interfaces, data flows, and critical systems controls.
• Conduct risk assessments, define audit procedures, walkthroughs, and testing; document evidence.

Skills

IT Audit

IT Risk

COBIT/ISO27001

CISA

Tools

COBIT

ISO 27001

NIST

Job description

GoTo is seeking an Internal Audit Lead (IT) to drive end-to-end risk-based IT audits across infrastructure, cloud, and data environments. You will collaborate with Technology, Security, Risk, and Compliance teams to identify control gaps and recommend improvements.

Ideal candidates have 6–8 years in IT audit or technology risk, strong knowledge of IT controls, cybersecurity, and data governance, plus a CISA certification.