Senior IT Auditor

RoleDigital GRC(Digital Governance Team Member)

Key Responsibilities• Identify, assess, and develop end-to-end mitigation plans for risks arising from theadoption of digital technologies and IT infrastructure,• Conduct IT risk and cybersecurity assessments of IT vendors and third parties (Third-Party / Vendor Security Assessments) across the vendor lifecycle,• Design, execute, and maintain periodic employee awareness programs on IT risk andcybersecurity practices,• Develop and maintain IT and cybersecurity risk registers, including risk taxonomy,root-cause classification, and mapping of risks to business objectives and controls,• Evaluate the design and operating effectiveness of IT controls and recommendremediation, with follow-up tracking to closure,• Support the drafting, review, and cascade of digital governance policies andstandards and monitor compliance,• Coordinate internal/external audit and regulatory requests, prepare documentations,and track corrective actions.

• Key Qualifications• Minimum 5 years in IT/digital risk management, IT governance,IT audit, or cybersecurity risk; experience in complex, regulated,holding-company, BUMN, or financial-institution environments ishighly preferred.• Strong understanding of IT governance and risk managementframeworks (COBIT, ISO 27001, NIST); proven ability to performend-to-end IT risk management, including risk assessment,control evaluation, and risk register maintenance.• Hands-on experience conducting third-party / vendor securityassessments and translating findings into actionable, risk-basedmitigation plans.• Ability to independently challenge risk assessments and risk-acceptance decisions; experience coordinating audits, preparingaudit-ready documentation, and driving remediation.• Certifications (preferred): CRISC, CISA, CISM, or ISO 27001Lead Implementer/Auditor.• Strong stakeholder engagement and documentation disciplineWorking proficiency in both Bahasa Indonesia and English,written and spoken.