Senior IT Compliance & Risk Officer (ISO27001/GDPR)

Gtech; Tangerang; On-site; IDR 180,000,000 - 280,000,000; Full time

Job summary

Gtech is seeking an IT Risk and Compliance Senior Officer to support, execute, and continuously improve our IT governance, risk, and compliance activities. This role focuses on hands-on implementation, operational oversight, and audit support for ISO/IEC 27001 and GDPR/PDP, with alignment to NIST CSF.

The role requires experience in control design, implementation, and documentation, ensuring governance and security controls are embedded across project delivery, change management, design reviews,

Qualifications

• Strong knowledge of IT Governance, IT Controls, and Information Security Controls.
• Hands-on understanding of ISO/IEC 27001, GDPR/PDP Regulation, NIST CSF / NIST SP 800.
• Experience in control design, control implementation, and control effectiveness assessment.
• High attention to detail with strong documentation, evidence management, and audit support skills.

Responsibilities

• Support the implementation, operation, and continuous improvement of the ISO/IEC 27001 ISMS.
• Execute compliance activities related to GDPR and applicable data protection regulations.
• Assist in mapping, maintaining, and monitoring security controls aligned with NIST CSF / NIST SP 800 series.
• Maintain compliance documentation, evidence, and records required for audits and assessments.

Skills

IT governance

IT controls

ISO 27001

GDPR compliance

NIST CSF

risk assessment

audit support

documentation

stakeholder coordination

Job description

Gtech is seeking an IT Risk and Compliance Senior Officer to support, execute, and continuously improve our IT governance, risk, and compliance activities. This role focuses on hands-on implementation, operational oversight, and audit support for ISO/IEC 27001 and GDPR/PDP, with alignment to NIST CSF.

The role requires experience in control design, implementation, and documentation, ensuring governance and security controls are embedded across project delivery, change management, design reviews,