Senior Internal Audit Specialist

Finture; Jakarta Pusat; On-site; IDR 120,000,000 - 240,000,000; Full time

Job summary

Finture in Jakarta is seeking an Internal Audit professional to conduct operational, compliance, IT general controls (ITGC), and thematic audits under the annual plan.

You will perform process walkthroughs, assess risks, and test the design and operating effectiveness of controls, and prepare clear, evidence-based findings for management and the CEO.

The role requires knowledge of OJK, BI, and Kominfo regulations for fintech, ISO 27001, and independence within the Three Lines of Defense.

Qualifications

• 2–5 years of experience in Internal Audit, Internal Control, Risk, or Compliance.
• Experience in financial services, particularly fintech/peer-to-peer lending or multifinance.
• Strong COSO and ISO 27001 knowledge.
• Ability to perform operational, ITGC, and compliance audits.
• Fluent in English.

Responsibilities

• Conduct audits under the annual audit plan.
• Perform process walkthroughs and assess risks; test control design and operating effectiveness.
• Prepare audit workpapers, findings, recommendations, and CEO/management reports.
• Track remediation and verify corrective actions are implemented.
• Assess compliance with OJK, BI, Kominfo, ISO 27001 and internal policies.
• Advise on preventive and detective controls without ownership.
• Review SOPs and controls from first- and second-line functions.
• Identify control gaps and propose practical improvements while remaining independent.
• Advise on risk mapping, control libraries, and RCSA.
• Deliver internal control awareness training to relevant teams.
• Provide expertise on SoD, access controls, approval matrices, fraud/AML controls.

Skills

Internal Audit

Risk Management

Governance

English fluency

Tools

COSO

ISO 27001

ITGC

Job description

• Conduct operational, compliance, IT general controls (ITGC), and thematic audits under the annual audit plan.
• Perform process walkthroughs, identify and assess risks, and test the design and operating effectiveness of controls.
• Prepare audit workpapers and clear, evidence-based findings, recommendations, and reports for management and the CEO.
• Track remediation of audit findings and verify that corrective actions are implemented effectively.
• Assess compliance with applicable OJK, BI, and Kominfo requirements, ISO 27001, and internal policies.
• Advise business units on the design of preventive and detective controls without assuming control ownership.
• Review SOPs, policies, and controls developed by first- and second-line functions.
• Identify control gaps and recommend practical improvements, while maintaining independence for subsequent audits.
• Advise Risk and Compliance teams on control libraries, risk and control self-assessments (RCSA), and risk mapping.
• Deliver internal control awareness training to relevant teams.
• Provide subject-matter advice on segregation of duties (SoD), access controls, approval matrices, fraud/AML controls, and ITGC.
• Maintain independence and objectivity under the Three Lines of Defense; do not own, implement, or operate management control.

Responsibilities

• Conduct operational, compliance, IT general controls (ITGC), and thematic audits under the annual audit plan.
• Perform process walkthroughs, identify and assess risks, and test the design and operating effectiveness of controls.
• Prepare audit workpapers and clear, evidence-based findings, recommendations, and reports for management and the CEO.
• Track remediation of audit findings and verify that corrective actions are implemented effectively.
• Assess compliance with applicable OJK, BI, and Kominfo requirements, ISO 27001, and internal policies.
• Advise business units on the design of preventive and detective controls without assuming control ownership.
• Review SOPs, policies, and controls developed by first- and second-line functions.
• Identify control gaps and recommend practical improvements, while maintaining independence for subsequent audits.
• Advise Risk and Compliance teams on control libraries, risk and control self-assessments (RCSA), and risk mapping.
• Deliver internal control awareness training to relevant teams.
• Provide subject-matter advice on segregation of duties (SoD), access controls, approval matrices, fraud/AML controls, and ITGC.
• Maintain independence and objectivity under the Three Lines of Defense; do not own, implement, or operate management control.

Requirements

• 2–5 years of experience in Internal Audit, Internal Control, Risk, or Compliance.
• Experience in financial services, particularly P2P lending, multifinance, ITSK, or PJP1.
• Strong understanding of COSO, ISO 27001 Annex A, and internal control principles.
• Ability to perform operational audits, ITGC audits, and compliance audits.
• Familiarity with OJK/BI/Kominfo regulations for fintech/multifinance.
• Fluent in English.