Senior Internal Audit Specialist

Finture; Jakarta Selatan; On-site; IDR 180,000,000 - 360,000,000; Full time

Job summary

Finture in Jakarta is seeking an experienced Internal Audit professional to execute operational, compliance, and ITGC audits aligned with the annual plan. You will conduct risk-based testing, document findings, and guide remediation while maintaining independence across the Three Lines of Defense.

The role requires 2–5 years in audit in financial services or fintech, fluency in English, and strong COSO/ISO27001 knowledge. Join a team focused on strengthening controls in a fintech environment.

Qualifications

• 2–5 years of experience in Internal Audit, Internal Control, Risk, or Compliance.
• Experience in financial services fintech/multifinance context.
• Strong understanding of COSO, ISO 27001 Annex A, and internal control principles.
• Ability to perform operational, ITGC, and compliance audits.
• Fluent in English.

Responsibilities

• Conduct operational, compliance, IT general controls (ITGC), and thematic audits under the annual audit plan.
• Perform process walkthroughs, identify and assess risks, and test the design and operating effectiveness of controls.
• Prepare audit workpapers and clear, evidence-based findings, recommendations, and reports for management and the CEO.
• Track remediation of audit findings and verify that corrective actions are implemented effectively.
• Assess compliance with applicable OJK, BI, and Kominfo requirements, ISO 27001, and internal policies.
• Advise business units on the design of preventive and detective controls without assuming control ownership.
• Review SOPs, policies, and controls developed by first- and second-line functions.
• Identify control gaps and recommend practical improvements, while maintaining independence for subsequent audits.
• Advise Risk and Compliance teams on control libraries, risk and control self‑assessments (RCSA), and risk mapping.
• Deliver internal control awareness training to relevant teams.
• Provide subject‑matter advice on segregation of duties (SoD), access controls, approval matrices, fraud/AML controls, and ITGC.
• Maintain independence and objectivity under the Three Lines of Defense; do not own, implement, or operate management control.

Skills

Internal Audit

Risk assessment

Compliance

COSO

Education

Bachelor's degree in Finance or related field

Job description

Responsibilities

• Conduct operational, compliance, IT general controls (ITGC), and thematic audits under the annual audit plan.
• Perform process walkthroughs, identify and assess risks, and test the design and operating effectiveness of controls.
• Prepare audit workpapers and clear, evidence-based findings, recommendations, and reports for management and the CEO.
• Track remediation of audit findings and verify that corrective actions are implemented effectively.
• Assess compliance with applicable OJK, BI, and Kominfo requirements, ISO 27001, and internal policies.
• Advise business units on the design of preventive and detective controls without assuming control ownership.
• Review SOPs, policies, and controls developed by first- and second-line functions.
• Identify control gaps and recommend practical improvements, while maintaining independence for subsequent audits.
• Advise Risk and Compliance teams on control libraries, risk and control self‑assessments (RCSA), and risk mapping.
• Deliver internal control awareness training to relevant teams.
• Provide subject‑matter advice on segregation of duties (SoD), access controls, approval matrices, fraud/AML controls, and ITGC.
• Maintain independence and objectivity under the Three Lines of Defense; do not own, implement, or operate management control.

Qualifications

• 2-5 years of experience in Internal Audit, Internal Control, Risk, or Compliance.
• Experience in financial services, particularly P2P lending, multifinance, ITSK, or PJP1.
• Strong understanding of COSO, ISO 27001 Annex A, and internal control principles.
• Ability to perform operational audits, ITGC audits, and compliance audits.
• Familiarity with OJK/BI/Kominfo regulations for fintech/multifinance.
• Fluent in English.