Senior IT Payment Audit Lead - Risk and Controls

GoTo Financial; Jakarta Utara; On-site; IDR 400,000,000 - 700,000,000; Full time

Job summary

GoTo Internal Audit is seeking experienced auditors to plan and execute risk-based audits across payment systems and processes. You will assess end-to-end controls, evaluate automated and application controls, and perform fieldwork to ensure quality audit deliverables.

Strong knowledge of payment ecosystems, IT risk, and BI regulations is essential. Collaboration with process owners and stakeholders will drive remediation and governance improvements across GoTo Financial and related units.

Qualifications

• 6–8 years in internal/IT audit, risk management, or related assurance functions, with payment systems experience preferred.
• Strong experience in payment systems, processing, reconciliation, settlement, digital payments, fintech.
• Knowledge of IT audit methodologies, internal control frameworks, automated controls, and system integrations.
• Familiarity with Bank Indonesia regulations and regulatory expectations for payment systems and IT risk.
• CISA certification is mandatory.
• Strong analytical and problem-solving skills with root-cause analysis ability.
• Strong written and verbal English communication skills.
• Strong stakeholder and project management capabilities.

Responsibilities

• Plan and execute risk-based audits across payment systems and processes.
• Assess end-to-end business processes to identify control gaps, operational inefficiencies, leakage points, and potential fraud risks, and evaluate the adequacy and effectiveness of existing controls.
• Evaluate application controls, automated controls, system integrations, data flows, access controls, and technology-enabled processes supporting payment systems.
• Conduct risk assessments, define audit scope and testing procedures, perform fieldwork and control testing, analyze evidence, and ensure audit working papers meet established methodology and quality standards.
• Develop clear and concise audit findings, identify root causes and potential business impacts, and provide practical recommendations to strengthen payment controls and mitigate identified risks.
• Partner with process owners and business stakeholders to validate audit findings, communicate key risks, and monitor management action plans through to timely remediation.
• Contribute to enhancing audit methodologies, data analytics, control testing approaches, and continuous monitoring techniques for payment-related risks.

Skills

CISA certification

Payment systems knowledge

Analytical thinking

Stakeholder management

English communication

Regulatory knowledge

Job description

GoTo Internal Audit is seeking experienced auditors to plan and execute risk-based audits across payment systems and processes. You will assess end-to-end controls, evaluate automated and application controls, and perform fieldwork to ensure quality audit deliverables.

Strong knowledge of payment ecosystems, IT risk, and BI regulations is essential. Collaboration with process owners and stakeholders will drive remediation and governance improvements across GoTo Financial and related units.