Senior IT GRC Consultant: Governance & Compliance

Sagara Technology; Jakarta Pusat; On-site; IDR 240,000,000 - 360,000,000; Full time

Job summary

SAGARA Technology in Jakarta, Indonesia is seeking an IT GRC Consultant to perform governance, risk, and compliance assessments, audits, and controls design. You will work with executives and IT teams to identify risks and craft mitigation strategies in a fast-paced startup environment.

The role requires 3+ years in IT GRC, hands-on assessment or IT audit, exposure to financial services, fluent English, and professional certifications such as CISA, CRISC, CGEIT, COBIT, ISO 27001 Auditor/Lead

Qualifications

• 3+ years of experience in IT GRC consulting, hands-on assessment or IT audit.
• Exposure to financial services sector.
• Fluent in English, both spoken and written.
• At least one relevant IT GRC certification (e.g., CISA, CRISC, CGEIT, COBIT, ISO 27001 Auditor/Lead Implementer, CISSP).

Responsibilities

• Assist IT GRC assessments and audits by conducting governance, risk, and compliance evaluations.
• Support IT risk management and compliance by identifying IT risks and recommending mitigation strategies.
• Ensure adherence to regulatory and framework requirements (OJK, BI, COBIT, ISO 27001, ISO 20001, NIST).
• Engage with senior executives, risk committees, and IT teams.
• Contribute to development and enhancement of IT governance policies.
• Assist senior consultants in managing IT GRC transformation initiatives.
• Promote continuous learning and adapt to startup dynamics.

Skills

IT GRC knowledge

Risk assessment

Communication

English proficiency

Education

Bachelor’s degree in IT/Business

Tools

CISA

CRISC

CGEIT

TOGAF

COBIT

ISO 27001 Auditor/Lead Implementer

CISSP

ITIL

Job description

SAGARA Technology in Jakarta, Indonesia is seeking an IT GRC Consultant to perform governance, risk, and compliance assessments, audits, and controls design. You will work with executives and IT teams to identify risks and craft mitigation strategies in a fast-paced startup environment.

The role requires 3+ years in IT GRC, hands-on assessment or IT audit, exposure to financial services, fluent English, and professional certifications such as CISA, CRISC, CGEIT, COBIT, ISO 27001 Auditor/Lead