IT Governance, Risk and Compliance Analyst
5 hours ago
**About the Role**
The role is expected to take part in designing, developing and maintaining risk-based IT policies to effectively govern the usage of IT in Midtrans. The role is also expected to assist and monitor the policies implementation, and evaluate whether the required controls are running effectively in achieving the intended objectives.
**What You Will Do**:
- Develop and maintaining IT policies, standards and procedures according to applicable internal and external requirements, including the applicable regulations in Indonesia
- Developing and maintaining compliance, governance and risk-related IT and business process flow
- Coordinating with compliance to ensure that every initiative, development and collaboration is complying with standards (internal and external)
- Conducting routine evaluation of policies and procedures implementation and ensure best practice risk mitigation and assessment functions are maintained to comply with the company's strategy
- Coordinating with related IT work units to follow up on data requests and internal audit findings, external audits and regulators
- Safekeeping / archiving of every IT development document both soft-copy and hardcopy on external storage on a regular basis
- Implementing a good governance organization using the PCI DSS and ISO27001 framework
- Ensure that every change is recorded and create the report every month, also RBAC and least privilege of access management in the critical portal are implemented
**What You Will Need**:
- A minimum of 3-5 years experience as Information Security, IT Governance, Risk and Compliance (IT GRC) or IT Auditors
- Demonstrate excellent communication and writing skills and proficient with English written and spoken
- Experienced in developing and maintaining IT and/or information security policies and procedures
- Excellence knowledge in developing risk management and IT framework, BIA, BCP and BCM Framework
- Experienced in report document development and delivery;Having excellent experience with PCI-DSS standards, ISO 27001, ISO 31000, ITIL andCOBIT
- Having good knowledge with local and regional regulatory requirements and how they impact IT policies (having experience is preferred)
- One or more of the following or equivalent certifications preferred: PCI DSS related, CISA, CRISC, ITIL, COBIT is preferred
**About the Team**
He/she will be part of Merchant Payment IT Governance, Risk and Compliance team members. Will be part of GoTo Financial InfoSec team. Reporting to Merchant Payment IT Governance, Risk and Compliance Lead and working closely with Regulatory and Compliance, Engineering, Legal, People & Partner, and any other relevant stakeholder.
**About Us**
Gojek is a Super App. It’s one app for ordering food, commuting, digital payments, shopping, hyper-local delivery, and dozen other products. It is Indonesia’s first and only decacorn. It's also the only Southeast Asian startup to be part of Fortune's list of 'Companies That Changed The World.'
**Our Mission**: To create and scale positive socio-economic impact for our customers, driver-partners, business and MSMEs.
As of 2021, Gojek processed more than $9 billion annualised gross transaction value across all markets where it operates - in Singapore, Thailand, Vietnam and Indonesia. We have the largest food delivery product in Asia, (outside of China), and the largest payments wallet in Southeast Asia.
Our investors include Google, Facebook, PayPal, Sequoia Capital, Tencent Holdings among others.
- Gojek is committed to building a diverse and inclusive workplace and is an equal opportunity employer. We do not discriminate on the basis of race, religion, national origin, gender, gender identity, sexual orientation, disability, age, education status, or any other legally protected status._
-
IT Risk and Compliance Governance
2 weeks ago
Jakarta, Indonesia PT Bank Central Asia Tbk Full timePerkembangan teknologi yang kian pesat merupakan salah satu tantangan yang harus dihadapi oleh semua perusahaan di Indonesia, termasuk BCA. Menjawab tantangan ini, BCA terus mengedepankan inovasi agar dapat senantiasa menjadi bank yang dapat diandalkan oleh masyarakat. Untuk memastikan bahwa BCA memastikan kepatuhan dan mitigasi risiko di bidang IT...
-
IT Governance, Risk and Compliance
7 months ago
Jakarta, Indonesia Ajaib Full time**Life at Ajaib** Here at Ajaib, we address ourselves as Magicians because making magic happen is our specialty! Ajaib is committed to creating an inclusive environment where all Magicians are valued for their contributions, opinions, and skills. Through our 3DNAs, we implement Everyone is an Owner to strengthen our core value in developing as a team,...
-
Jakarta, Indonesia GO-JEK Full time**About the Role** The role is expected to take part in designing, developing and maintaining risk-based IT policies to effectively govern the usage of IT in GoPay. The role is also expected to assist and monitor the policies implementation, and evaluate whether the required controls are running effectively in achieving the intended objectives. **What You...
-
IT Governance, Risk, and Compliance
7 months ago
Jakarta, Indonesia Techtiera Services Indonesia Full time**Requirements**: - Bachelor's Degree (min GPA: 3.00) - Can work onsite **Key Responsibilities**:As an IT GRC Specialist at [Your Company Name], you will be responsible for: - **Governance Excellence**: Monitoring and evaluating the comprehensive implementation of information security policies, data protection, and overall IT governance within our...
-
IT Governance, Risk and Compliance Analyst
3 days ago
Jakarta, Indonesia GO-JEK Full time**About the role** IT GRC Analyst in Gojek Financial Services will support the adoption of a unified IT governance, risk management, and compliance (GRC) framework, processes and approach. In addition to that, you will support the day to day management of the associated activities to improve the IT-GRC posture as well as to ensure security and technology...
-
IT Governance, Risk and Compliance
7 months ago
Jakarta, Indonesia PT Cywa Informatika Algoritma Full timeThis is a full-time role for an **IT Governance, Risk, and Compliance** professional. The role is primarily located in Jakarta. The role involves day-to-day tasks related to identifying and conducting risk level related to projects, implementing ISO 27001, communicating and coordinating with teams, and providing excellent services. **Qualifications**: -...
-
IT Governance Risk and Compliance
2 weeks ago
Jakarta, Indonesia PT. Prima Vista Solusi Full timeCreating IT Policies, Standards, and Procedures in accordance with industry best practice Perform IT Internal Audit to ensuring that Policies, Standards, and Procedures are implemented Adopt and implement IT Governance and Information Security best practices such as COBIT 2019, PCI DSS, PCI SSS, IS0 27001 Graduated from a reputable University. Bachelor's...
-
IT Grc Team
7 days ago
Jakarta, Indonesia FinAccel Full timeThe Governance, Risk, and Compliance Team will be responsible for defining, measuring, assessing and aligning with the ISO 27001 framework and other regulatory compliance legislature through maintenance/publication of the information Security Policy & Guiding Standards, coordination of security training/awareness and being responsible for Policy...
-
IT Risk and Governance Head
1 week ago
Jakarta, Indonesia Vlink Inc Full timeConducting activities for communication and education related to the implementation of internal and external regulations in the IT division - Manage IT Projects from a risk and compliance perspective - Control information technology risks - Supervision of IT service quality - Oversight of IT risk management and Change Management - Measuring the level of bank...
-
Process&governance Analyst
1 week ago
Jakarta, Indonesia SMART Agribusiness and Food Full timeProcess Architecture 1. Support role to Process Architects as Process Analysts including but not limited to development and maintenance of process hierarchies, process flows, competency frameworks 2. Maintains process management standards and performs compliance checks against standards. 3. Works with Business Units to identify process issues, performs...
-
Sr. IT Risk
6 days ago
Jakarta, Indonesia Amartha Full timeIdentify security risk and define system security requirement, identify problem, propose then execute solutions - Assist in the establishment and completion of risk control assessments of internal information systems and functions - Assist in the development, maintenance, and implementation of Information Technology Policies and Procedures as well as the...
-
Governance & Compliance Administrator
7 months ago
Jakarta, Indonesia PT Astra Digital Mobil (mobbi) Full timeMonitor and evaluate the implementation of information security, data protection and IT governance policies as a whole in the company, as well as ensure that security requirements are fulfilled and complied with. - Supervise and carry out periodic IT security audits to identify security and conformity risks, as well as provide recommendations for...
-
Risk Management
2 weeks ago
Jakarta, Indonesia Home Credit Indonesia Full time**The Talent will responsible for**: Having a good understanding on Enterprise Risk Management Framework and relevant regulations. Having a good understanding on KYC AML CFT Regulations and relevant regulations. Framework, Governance, Policy, Procedures and all relevant documents as per Group and Regulator. Driving and leading an effective implementation...
-
IT Compliance
2 weeks ago
Jakarta, Indonesia PT Asuransi Allianz Life Indonesia Full timeCoordinate risk identification, assessment, mitigation, monitoring in the respective Division Control environment assessment, gaps assessment, and obtain sign off on the result Identify corresponding Key Risk Indicators Escalate risk event and prepare Risk Management reports for the Division represented (includes obtain sign-off from the Head of...
-
IT Risk
1 week ago
Jakarta, Indonesia Home Credit Indonesia Full timeDevelop, refine and implement information security policies, procedures and guidelines to meet compliance and regulatory requirements Ensure compliance with Local and Group policies and procedures Lead and execute risk and vulnerabilities analysis for various IT systems and processes Identify risks and controls necessary to remediate identified risks and...
-
IT Risk Mamagement
7 months ago
Jakarta, Indonesia KSPS Full timePT. Karya Solusi Prima Sejahtera (KSPS) didirikan pada 25 November 2011 oleh Koperasi Karyawan PT. Aplikanusa Lintasarta (KOPKARLA), dan disahkan dengan Keputusan Menteri Hukum dan Hak Asasi Manusia Republik Indonesia No. AHU-00737.AH.01.01 tahun 2012. Sejak 1 Maret 2018, KSPS mulai akif beroperasi dengan jasa utamanya yaitu penyediaan jasa Sumber Daya...
-
Legal Compliance Analyst
5 days ago
Jakarta, Indonesia ASSA Rent Full timeImplement and manage an effective legal compliance program. - Develop and review company policies. - Advise management on the company’s compliance with laws and regulations through detailed reports. - Create and manage effective action plans in response to audit discoveries and compliance violations. - Regularly audit company procedures, practices, and...
-
IT Governance
7 months ago
Jakarta, Indonesia Talent Creative IND Full timePT SIGMATECH HIRING IT Governance Requirement - Min diploma’s degree in IT, Computer Science, or a related field. - Experience in IT Governance, compliance, or risk management. - Strong knowledge of IT governance frameworks and industry standards. - Familiarity with regulatory requirements in the organization's industry. - Excellent communication and...
-
Risk Policy Analyst
2 weeks ago
Jakarta, Indonesia Amartha Full timeOversee the company’s SOP & policy to adhere to compliance - Provide input for process improvement whenever possible. - Identifies and drives risk and control driven improvement efforts for the policy governance and oversight program - Ensure Standard Operation Procedure (SOP) and Work Instruction for operations are available and updated according to the...
-
Security Risk
2 weeks ago
Jakarta, Indonesia PT Bank Central Asia Tbk Full timeSebagai perusahaan yang bergerak dibidang perbankan, BCA dituntut untuk selaras dengan aturan-aturan terkait security dari regulator maupun lembaga sertifikasi, untuk itu BCA membutuhkan IT Security Risk & Compliance yang bertanggung jawab untuk: Melakukan analisa risiko terkait proses-proses IT dan memberikan rekomendasi perbaikan yang efektif. Evaluasi...