Senior IT Governance

Akulaku Group; Jakarta Pusat; On-site; IDR 180,000,000 - 360,000,000; Full time

Job summary

Akulaku Group is seeking a skilled IT Governance & Compliance professional to assess IT risks, build compliant controls, and maintain governance documentation. You will shape policies, train staff, and ensure adherence to regulatory standards across Indonesian and English communications.

The role requires 3+ years in IT risk or security, strong knowledge of ISO/NIST standards, and a detail-oriented, high-integrity mindset. Join a team focused on robust governance and proactive risk management.

Qualifications

• Minimum 3 years total work experience.
• 2+ years in same position/field.
• Strong understanding of IT risk management frameworks (ISO27001, ISO31000, NIST, or equivalent).
• Knowledge of information security policies, IT risk controls, and regulatory compliance.
• Experience implementing IT policies, internal controls, and audits of IT systems.
• Ability to develop IT governance policies and drive implementation across the org.
• Analytical and strategic thinking to identify and manage IT risks.
• Excellent Indonesian and English communication skills (verbal & written).
• High integrity with detail-oriented approach.

Responsibilities

• Conduct regular risk assessments to identify IT process risks.
• Develop and maintain a compliance framework; conduct audits of compliance.
• Develop and update IT policies, procedures, and forms.
• Design and implement controls and security measures to mitigate risks.
• Provide IT security and compliance training and awareness programs.
• Maintain accurate, up-to-date documentation on IT governance, risk, and compliance.

Skills

IT risk management

InfoSec policies

IT policies & controls

IT governance policies

Analytical thinking

Bilingual communication

Integrity & detail

Job description

Duties

• 1.ConductregularriskassessmentstoidentifyandevaluatepotentialrisksassociatedwithITprocesses,systems
• 2.Developandmaintainacomplianceframework,andconductauditsandassessmentsofcompliancewith establishedstandards;
• 3.DevelopandupdateITpolicies,procedures,andforms;
• 4.Designandimplementcontrolsandsecuritymeasurestomitigateidentifiedrisks;
• 5.ProvidetrainingandawarenessprogramsonITsecurityandcompliancepolicies;and
• 6.Maintainingaccurateandup-to-datedocumentationrelatedtoITgovernance,risk,andcomplianceactivities.

Requirements

• 1.Minimumtotalworkexperience>=3years
• 2.Totalworkexperienceinthesameposition/field>=1year
• 3.In-depthunderstandingoftheISO27001ITriskmanagementframework(e.g.,ISO27001,ISO31000,NIST,orequivalent).
• 4.Knowledgeofpoliciesandproceduresrelatedtoinformationsecurity,ITriskcontrol,andcompliancewithrelevantregulations(includingregulationsfromtheFinancialServicesAuthority).
• 5.ExperienceinimplementingITpolicies,internalcontrols,andauditingrelatedtoITsystems.
• 6.SkillsindevelopingpoliciesandproceduresrelevanttoITGovernanceandensuringtheireffectiveimplementationthroughouttheorganization.
• 7.Analyticalandstrategicthinkingskillstoeffectivelyidentifyandmanageinformationtechnologyrisks.
• 8.GoodcommunicationskillsinIndonesianandEnglish(verbalandwritten).
• 9.Highintegrity,detail-oriented,andfocused