Senior IT Governance

Akulaku; Jakarta Pusat; Sur place; IDR 167 400 000 - 279 000 000; Plein temps

Résumé du poste

Akulaku is seeking an IT Governance, Risk and Compliance specialist in Jakarta to lead risk assessments, develop policies aligned with ISO 27001 and related standards, and ensure regulatory compliance. The role involves designing controls, conducting audits, and delivering staff training across IT teams.

The ideal candidate will collaborate with IT security and operations to maintain up-to-date documentation and ensure effective governance across the organization.

Qualifications

• Experience implementing IT risk controls and audits.
• Strong understanding of IT governance frameworks and standards.
• Ability to translate regulatory requirements into actionable policies.

Responsabilités

• Conduct regular risk assessments of IT processes, systems, and data.
• Develop and maintain a compliance framework and conduct audits.
• Develop and update IT policies, procedures, and forms.
• Design and implement IT controls and security measures.
• Provide training and awareness on IT security and compliance policies.
• Maintain accurate documentation related to IT governance, risk, and compliance.

Connaissances

ISO 27001

IT risk

Auditing

Policy creation

Regulatory compliance

Communication

Description du poste

Responsibilities

• Conduct regular risk assessments to identify and evaluate potential risks associated with IT processes, systems and data;
• Develop and maintain a compliance framework, and conduct audits and assessments of compliance with established standards;
• Develop and update IT policies, procedures, and forms;
• Design and implement controls and security measures to mitigate identified risks;
• Provide training and awareness programs on IT security and compliance policies; and
• Maintaining accurate and up-to-date documentation related to IT governance, risk, and compliance activities.

Requirements

• Minimum total work experience >= 3 years
• Total work experience in the same position/field >= 1 year
• In-depth understanding of the ISO 27001 IT risk management framework (e.g., ISO 27001, ISO 31000, NIST, or equivalent).
• Knowledge of policies and procedures related to information security, IT risk control, and compliance with relevant regulations (including regulations from the Financial Services Authority).
• Experience in implementing IT policies, internal controls, and auditing related to IT systems.
• Skills in developing policies and procedures relevant to IT Governance and ensuring their effective implementation throughout the organization.
• Analytical and strategic thinking skills to effectively identify and manage information technology risks.
• Good communication skills in Indonesian and English (verbal and written).
• High integrity, detail-oriented, and focused