Senior IT Auditor

RoleDigital GRC(Digital Governance Team Member)Key Responsibilities

• Identify, assess, and develop end-to-end mitigation plans for risks arising from theadoption of digital technologies and IT infrastructure,
• Conduct IT risk and cybersecurity assessments of IT vendors and third parties (Third-Party / Vendor Security Assessments) across the vendor lifecycle,
• Design, execute, and maintain periodic employee awareness programs on IT risk andcybersecurity practices,
• Develop and maintain IT and cybersecurity risk registers, including risk taxonomy,root-cause classification, and mapping of risks to business objectives and controls,
• Evaluate the design and operating effectiveness of IT controls and recommendremediation, with follow-up tracking to closure,
• Support the drafting, review, and cascade of digital governance policies andstandards and monitor compliance,
• Coordinate internal/external audit and regulatory requests, prepare documentations,and track corrective actions.Key Qualifications
• Minimum 5 years in IT/digital risk management, IT governance,IT audit, or cybersecurity risk; experience in complex, regulated,holding-company, BUMN, or financial-institution environments ishighly preferred.
• Strong understanding of IT governance and risk managementframeworks (COBIT, ISO 27001, NIST); proven ability to performend-to-end IT risk management, including risk assessment,control evaluation, and risk register maintenance.
• Hands-on experience conducting third-party / vendor securityassessments and translating findings into actionable, risk-basedmitigation plans.
• Ability to independently challenge risk assessments and risk-acceptance decisions; experience coordinating audits, preparingaudit-ready documentation, and driving remediation.
• Certifications (preferred): CRISC, CISA, CISM, or ISO 27001Lead Implementer/Auditor.
• Strong stakeholder engagement and documentation disciplineWorking proficiency in both Bahasa Indonesia and English,written and spoken.