Junior IT Governance

1. Assist in researching regulatory updates industry best practices and IT GRC benchmarks to support senior team members in drafting any internal policy & procedure proposals.
2. Design update and enforce IT GRC policies aligned with financial sector regulations and global frameworks (COBIT 2019 ISO 27001 ISO 27701 ISO 31000 GDPR)
3. Gather organize and summarize input and operational pain points from various Departments (HR Legal Business Units) regarding existing IT compliance & security common practices.
4. Assist in drafting core SOPs updating governance policies and maintaining regulatory compliance checklists while control checklists designed to improve daily internal IT GRC culture following POJK PBI regarding IT implementation on Fintech Industry.
5. Identify & help map proposed internal controls against existing cross-departments workflows to identify potential operational friction before policies are finalized.
6. Assist in identifying all relevant risks in IT related activity tasks collect manage and conduct IT risk control self assessment to prevent and define risk mitigation designed proposals. 
7. Collect organize and verify audit evidence for internal reviews and external regulatory inspections (audit support internal team).
8. Work with IT Infrastructure IT Information & Security and Data Platform teams to log review and track system change requests. Thats a good value to understand and know in general (at least) regarding IT Infra Info-sec and data governance implementation.  
9. Conduct routine checks to ensure day-to-day operations & business implementation are aligned with IT governance implementation on financial industry standards.
10. Become a support PIC to drive any change management and implementation for IT GRC policies. 
11. Become a support PIC for communicating things related to IT Security IT Risk Management Governance and Compliance for both internal and external stakeholders.
12. Working closely and supporting execution tasks with mid and senior management personnel across the organization to understand the organizations contexts strategy and governance needs to adapt policies accordingly.

Qualifications :

1. Bachelors degree in computer science information systems related fields or equivalent work experience
2. Working experience as Compliance & Information Security IT Governance Risk and Compliance (IT GRC) Risk Management or IT Auditor in the financial service industry or banking or a similar company in governance roles is a plus
3. Good logical analysis & problem solving skills
4. Excellent verbal/written communication & organizational skills
5. Leadership execution & process oriented and negotiation skills
6. Knowledge of cybersecurity standards such as ISO 27001 ISO 27701 PCI-DSS and NIST 2
7. Knowledge of regulations such as POJK PBI LPBBTI and UU PDP  GDPR
8. Knowledge of IT Governance framework such as COBIT ITIL
9. Knowledge of cybersecurity frameworks
10. Good understanding of legal principles personal data protection laws or obtaining Data Protection Officer certification is a plus

Remote Work :

No

Employment Type :

Contract