Strategic GRC & IT Security Lead for Fintech

Cermati; Daerah Khusus Ibukota Jakarta; On-site; IDR 270,000,000 - 330,000,000; Full time

Job summary

Cermati is seeking an IT Governance, Risk, and Compliance (IT GRC) professional with a minimum of three years in banking or financial services. The role focuses on building and maintaining IT policies, ensuring regulatory compliance, and coordinating audits.

The candidate should have experience with ISO 27001 and PCI-DSS and understand Indonesian regulations such as OJK, BI, and Kemkominfo. Strong communication and writing skills are required to drive policy socialization and collaboration

Qualifications

• Minimum 3 years in IT GRC or IT auditing within banking or financial services

Responsibilities

• Develop and maintain IT policies, standards, and procedures per internal and Indonesian regulations (POJK, PBI)
• Coordinate with Compliance to perform gap assessment and mitigate risks
• Ensure all initiatives comply with standards and regulations (internal and external)
• Develop and implement RBAC and least privilege access management
• Assess effectiveness of IT controls to safeguard information and ensure availability
• Coordinate with IT units to follow up on data requests and audits
• Update internal control framework per ITGC, ITAC, ISO 27001, PCI DSS, and industry best practices
• Socialize IT policy and awareness in day-to-day operations

Skills

IT GRC

Policy development

Communication skills

Audit & compliance

Job description

Cermati is seeking an IT Governance, Risk, and Compliance (IT GRC) professional with a minimum of three years in banking or financial services. The role focuses on building and maintaining IT policies, ensuring regulatory compliance, and coordinating audits.

The candidate should have experience with ISO 27001 and PCI-DSS and understand Indonesian regulations such as OJK, BI, and Kemkominfo. Strong communication and writing skills are required to drive policy socialization and collaboration