Senior IT Audit & Risk Lead

Korindo Group; Jakarta Selatan; On-site; IDR 279,000,000 - 502,200,000; Full time

Job summary

Korindo Group seeks an IT Audit professional to conduct IT risk assessments and develop risk-based audit plans. You will lead audits of IT General Controls (ITGC) and application controls, reviewing key IT processes such as access, change management, backup and recovery, IT operations and incident management.

You will assess IT governance, cybersecurity and information security controls, evaluate IT vendor and third-party risks, and perform testing with evidence gathering and reporting.

Qualifications

• Bachelor's degree in information systems, IT, computer science, accounting or management.
• Minimum 3 years of IT Audit, Internal Audit IT Risk & Governance, or IT Compliance experience.
• Strong understanding of ITGC and application controls.
• Knowledge of cybersecurity, access management, change management, backup/recovery, and IT operations.

Responsibilities

• Conduct IT Risk Assessments and develop risk-based audit plans.
• Lead audit covering IT General Controls (ITGC) and application controls.
• Review IT processes including access management, change management, backup & recovery, IT operations, and incident management.
• Assess IT governance, cybersecurity, and information security controls.
• Evaluate IT vendor and third-party risks, including controls and agreements.
• Perform audit testing, gather evidence, and identify control weaknesses or risks.
• Prepare audit working papers, reports, recommendations, and follow up on actions.
• Coordinate with IT, Risk Management, Compliance, Internal Audit, and business teams.

Skills

IT General Controls (ITGC)

Application controls

Access management

Change management

Backup & recovery

IT operations

Incident management

Cybersecurity

Information security controls

SAP ERP

Education

Bachelor's Degree in Information Systems/IT/CS/Accounting/Management

Tools

SAP

Job description

Korindo Group seeks an IT Audit professional to conduct IT risk assessments and develop risk-based audit plans. You will lead audits of IT General Controls (ITGC) and application controls, reviewing key IT processes such as access, change management, backup and recovery, IT operations and incident management.

You will assess IT governance, cybersecurity and information security controls, evaluate IT vendor and third-party risks, and perform testing with evidence gathering and reporting.