digital GRC

• Minimum 5 years in IT/digital risk management, IT governance,

IT audit, or cybersecurity risk; experience in complex, regulated,

holding-company, BUMN, or financial-institution environments is

highly preferred.

• Strong understanding of IT governance and risk management

frameworks (COBIT, ISO 27001, NIST); proven ability to perform

end-to-end IT risk management, including risk assessment,

control evaluation, and risk register maintenance.

• Hands-on experience conducting third-party / vendor security

assessments and translating findings into actionable, risk-based

mitigation plans.

• Ability to independently challenge risk assessments and risk-

acceptance decisions; experience coordinating audits, preparing

audit-ready documentation, and driving remediation.

• Certifications (preferred): CRISC, CISA, CISM, or ISO 27001

Lead Implementer/Auditor.

• Strong stakeholder engagement and documentation discipline

Working proficiency in both Bahasa Indonesia and English,