Senior IT Payment Audit Lead — Controls & Risk

GoPay; Jakarta Pusat; On-site; IDR 400,000,000 - 700,000,000; Full time

Job summary

GoTo is seeking an Internal Audit Lead to drive end-to-end risk-based audits of payment systems and technology-enabled controls across the organization. You will identify control gaps, translate findings into actionable recommendations, and collaborate with stakeholders to strengthen governance and resilience.

The role requires 6–8 years in internal IT/audit with CISA certification and strong English communication.

Qualifications

• 6-8 years of professional experience in internal audit, IT audit, operational audit, or related assurance functions.
• Strong knowledge of IT audit, risk-based audit methodologies, internal control frameworks, application and automated controls.
• Fluent written and verbal English communication; ability to prepare concise audit reports and documentation.
• Familiarity with BI regulations, regulatory requirements and supervisory expectations relevant to payment systems and technology risk.
• CISA certification is mandatory given the technology-focused audit scope.

Responsibilities

• Plan and execute risk-based audits across payment systems and processes.
• Assess end-to-end business processes to identify control gaps, inefficiencies, leakage points, and potential fraud risks.
• Evaluate application controls, automated controls, system integrations, data flows, and access controls.
• Conduct risk assessments, define audit scope and testing procedures, perform fieldwork and testing.
• Develop clear audit findings and practical recommendations to strengthen controls and mitigate risks.
• Partner with process owners and stakeholders to validate findings and monitor action plans to remediation.
• Contribute to audit methodologies, analytics, and continuous monitoring techniques for payment-related risks.

Skills

Analytical thinking

Problem solving

Stakeholder management

Communication skills

Education

CISA Certification

Job description

GoTo is seeking an Internal Audit Lead to drive end-to-end risk-based audits of payment systems and technology-enabled controls across the organization. You will identify control gaps, translate findings into actionable recommendations, and collaborate with stakeholders to strengthen governance and resilience.

The role requires 6–8 years in internal IT/audit with CISA certification and strong English communication.