Regional IT GRC Analyst – Compliance & Risk Lead

Xendit; Jakarta Pusat; Vor Ort; IDR 60.000.000 - 90.000.000; Vollzeit

Zusammenfassung

Xendit, a leading fintech payment provider, seeks a mid-level to senior IT GRC Analyst to oversee regulatory compliance, risk management, and certification programs across markets. You will partner with engineering, security, product, and legal teams to embed compliance into product delivery and operations.

You will coordinate with regulators across regions, manage certification lifecycles, perform risk assessments, and develop IT policies and controls that meet multi‑jurisdictional standards in

Qualifikationen

• 3–5 years of hands-on IT GRC, IT Risk Management, or IT Compliance experience
• Solid knowledge of PCI-DSS and ISO 27001 frameworks, including implementation, certification, and audit readiness
• Familiarity with BI IT governance regulations for payment providers in Indonesia
• Exposure to or willingness to work in other SEA/international markets (e.g., BSP, BOT, MAS, BNM)
• Proven IT risk assessments, control testing, and gap analyses experience
• Ability to develop, review, and maintain IT policies, standards, procedures
• Strong analytical skills to translate regulatory requirements into technical controls
• Effective communicator across multiple countries/time zones

Aufgaben

• Own and support Xendit's compliance programs for certification and regulatory audits
• Serve as the primary GRC point of contact for regional regulatory needs
• Manage the full certification lifecycle from scoping to surveillance
• Conduct periodic IT risk assessments and maintain a consolidated risk register
• Perform internal control testing to evaluate IT controls across regional entities
• Identify compliance gaps and drive remediation in collaboration with teams
• Develop and enforce IT policies and procedures per multi‑jurisdictional requirements
• Coordinate regulatory audits with auditors and regulators end‑to‑end
• Monitor regulatory developments and assess impact on IT environment
• Produce dashboards and management briefings on GRC posture
• Collaborate with engineering, product, security, and legal to embed compliance-by-design
• Support continuous improvement of GRC tooling and processes

Kenntnisse

IT GRC

PCI-DSS

ISO 27001

Regulatory coordination

Audit & risk

Policy development

Cross-country comms

Jobbeschreibung

Xendit, a leading fintech payment provider, seeks a mid-level to senior IT GRC Analyst to oversee regulatory compliance, risk management, and certification programs across markets. You will partner with engineering, security, product, and legal teams to embed compliance into product delivery and operations.

You will coordinate with regulators across regions, manage certification lifecycles, perform risk assessments, and develop IT policies and controls that meet multi‑jurisdictional standards in