Risk Officer

PT ITSEC Asia Tbk; Jakarta Selatan; On-site; IDR 167,400,000 - 279,000,000; Full time

Job summary

PT ITSEC Asia Tbk is looking for a Risk Officer to lead risk management activities in Jakarta Selatan, Indonesia. This role includes overseeing local ISO operations, maintaining risk registers, and ensuring compliance with standards.

The ideal candidate will hold a bachelor’s degree in a related field and have at least 4 years of experience in risk or compliance sectors. Proficiency in both Bahasa Indonesia and English is essential for effective communication.

Qualifications

• Bachelor’s degree in relevant fields such as Informatics Engineering or Risk Management.
• Minimum 4 years of experience in risk management or information security.
• Strong understanding of ISO/IEC 27001 and risk management frameworks.

Responsibilities

• Act as the designated Risk Officer for Indonesia operations.
• Serve as the internal ISO Coordinator, overseeing ISO management.
• Maintain and update the local risk register, ensuring reporting accuracy.

Skills

Risk management

ISO/IEC 27001

Compliance

Documentation

Analysis

Project management

Communication in Bahasa Indonesia

Communication in English

Education

Bachelor’s degree in Informatics Engineering, Computer Engineering, Information Security, Risk Management

Tools

ISO 27001 Lead Implementer/Auditor certification

CRISC certification

Job description

• Act as the designated Risk Officer for Indonesia operations, leading local risk identification, assessment, and mitigation activities.
• Serve as the internal ISO Coordinator, overseeing the implementation and maintenance of ISO/IEC 27001 and/or other relevant standards.
• Maintain and update the risk register, ensuring timely and accurate reporting to the global risk management team.
• Coordinate and support internal and external ISO audits, including preparation, documentation, findings resolution, and continuous improvement.
• Review and update policies, SOPs, and ISMS documentation to ensure audit-readiness and operational compliance.
• Provide risk-based input during strategic planning, vendor selection, and client-facing initiatives.
• Monitor and interpret regulatory changes and compliance risks relevant to cybersecurity and data protection in Indonesia.
• Deliver training and awareness sessions to enhance understanding of ISO and risk management principles across departments.
• Collaborate with global risk and compliance teams, aligning local practices with corporate frameworks and participating in group-wide initiatives.
• Track, report, and follow up on non-conformities, risk events, and audit findings to ensure timely closure and mitigation.

• Bachelor’s degree in Informatics Engineering, Computer Engineering, Information Security, Risk Management, or a related field.
• Relevant certifications highly preferred (e.g., ISO 27001 Lead Implementer/Auditor, CRISC,- etc.).
• Minimum 4 years of professional experience in risk management, compliance, information security, or internal audit.
• Prior experience working in regulated industries or certified environments (e.g., ISO/IEC 27001, ISO 9001, ISO 14001, etc.).
• Strong understanding of ISO/IEC 27001 and risk management frameworks (e.g., ISO 31000, COSO, NIST).
• Familiarity with compliance requirements in cybersecurity, privacy (e.g., PDP Law), and operational risk.
• Proficient in developing risk registers, audit reports, and SOPs.
• Experience working with global stakeholders and cross-functional teams is a plus.
• Strong analytical, documentation, and project management skills.
• Excellent communication in Bahasa Indonesia and English (both verbal and written).
• High integrity, attention to detail, and ability to work independently.