Associate Information Security Auditor

Key Responsibilities

1. Regulatory & Compliance Audit Support

• Assist in the execution of cybersecurity regulatory audits in alignment with:

• PBI (Bank Indonesia regulations)

• POJK (OJK cybersecurity regulations)

• Other applicable sectoral regulatory requirements

• Conduct control walkthroughs and perform evidence validation procedures.

• Support gap assessments and compliance mapping initiatives.

2. ISO 27001 & ISO 27002 Engagements

• Support the implementation of ISO 27001:2022 gap assessments.
• Assist in facilitating risk assessment workshops and developing risk registers.
• Contribute to the preparation of the Statement of Applicability (SoA).
• Review organizational policies and procedures against Annex A control requirements.
• Support audit readiness activities in preparation for certification audits.

3. Risk & Governance Assessment

• Assist in identifying control deficiencies and assessing potential risk exposure.
• Document risk impacts and provide practical, well-founded recommendations.

4. Audit Documentation & Reporting

• Prepare audit working papers and maintain supporting evidence documentation.
• Draft designated sections of audit and advisory reports.
• Communicate audit findings in a structured, clear, and professional manner.
• Monitor remediation progress, where applicable.

5. Client Engagement Support

• Participate in client meetings and workshops in a professional capacity.
• Translate technical findings into clear and concise business language suitable for stakeholders.

Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, Information Systems, or a related discipline.

• 0–2 years of relevant experience in IT audit, cybersecurity, risk management, or compliance (strong fresh graduates are encouraged to apply).

• Foundational knowledge of:

• ISO 27001 framework

• IT General Controls (ITGC)

• Risk assessment methodologies

• Familiarity with:

• Networking fundamentals (TCP/IP, segmentation)

• Firewall, VPN, and Identity & Access Management (IAM) concepts

• Basic principles of incident response and business continuity

• Strong analytical, organizational, and documentation skills.

• Demonstrated integrity and a high level of attention to detail.

Preferred Qualifications

• Exposure to regulatory compliance frameworks (PBI/POJK).
• Familiarity with ISO 27001:2022 standards.
• Interest in pursuing professional certifications (e.g., CISA, ISO Lead Auditor/Lead Implementor).
• Strong written English proficiency for formal report preparation.