Senior Internal Audit & Controls Advisor

Finture; Jakarta Pusat; On-site; IDR 120,000,000 - 240,000,000; Full time

Job summary

Finture in Jakarta is seeking an Internal Audit professional to conduct operational, compliance, IT general controls (ITGC), and thematic audits under the annual plan.

You will perform process walkthroughs, assess risks, and test the design and operating effectiveness of controls, and prepare clear, evidence-based findings for management and the CEO.

The role requires knowledge of OJK, BI, and Kominfo regulations for fintech, ISO 27001, and independence within the Three Lines of Defense.

Qualifications

• 2–5 years of experience in Internal Audit, Internal Control, Risk, or Compliance.
• Experience in financial services, particularly fintech/peer-to-peer lending or multifinance.
• Strong COSO and ISO 27001 knowledge.
• Ability to perform operational, ITGC, and compliance audits.
• Fluent in English.

Responsibilities

• Conduct audits under the annual audit plan.
• Perform process walkthroughs and assess risks; test control design and operating effectiveness.
• Prepare audit workpapers, findings, recommendations, and CEO/management reports.
• Track remediation and verify corrective actions are implemented.
• Assess compliance with OJK, BI, Kominfo, ISO 27001 and internal policies.
• Advise on preventive and detective controls without ownership.
• Review SOPs and controls from first- and second-line functions.
• Identify control gaps and propose practical improvements while remaining independent.
• Advise on risk mapping, control libraries, and RCSA.
• Deliver internal control awareness training to relevant teams.
• Provide expertise on SoD, access controls, approval matrices, fraud/AML controls.

Skills

Internal Audit

Risk Management

Governance

English fluency

Tools

COSO

ISO 27001

ITGC

Job description

Finture in Jakarta is seeking an Internal Audit professional to conduct operational, compliance, IT general controls (ITGC), and thematic audits under the annual plan.

You will perform process walkthroughs, assess risks, and test the design and operating effectiveness of controls, and prepare clear, evidence-based findings for management and the CEO.

The role requires knowledge of OJK, BI, and Kominfo regulations for fintech, ISO 27001, and independence within the Three Lines of Defense.