Compliance Manager

About the Role
You will be the Certification Authority (CA) Manager in the Trusted Role structure of PT Solusi Net Internusa (SNI/Digisign), part of the GoTo ecosystem. You will be responsible for overseeing the governance and compliance of the digital identity operation and work closely with product, infra, engineering, infosec and internal audit teams. In this role, you will lead strategic decision-making, manage operational risks, and ensure adherence to industry standards and regulatory requirements to maintain a secure and trusted CA environment. What You Will Do

• Helping the Policy Authority (PA) in maintaining Digisign compliance to the applicable laws and regulations, including other relevant standards in Public Key Infrastructure (PKI).
• Managing operational issues within the Trusted Role structure to ensure a secure and reliable operation of the CA activities ie. compliance of all technical, administrative, and procedural aspects across the CA infrastructure.
• Develop, maintain, and enforce procedures and guidelines that govern CA activities.
• Making decisions on partner evaluation, product development, internal alignment and other operational issues as governed by internal standards, procedures and guidelines.
• Advising and collaborating with relevant teams to solve operational issues to maintain Digisign's compliance.
• Managing relationships with relevant external parties eg. regulator, association, auditor.

What You Will Need

• Capable of leading a team, making strategic decisions, and communicating effectively with both technical and non-technical stakeholders.
• Understands the core components of PKI, among others: key and certificate lifecycle management, CA systems architecture.
• Strong understanding of confidentiality, integrity, availability, and other cybersecurity best practices applicable to CA environments.
• Proficiency in identifying, assessing, and mitigating risks, as well as ensuring adherence to regulatory and policy requirements.
• Familiar with relevant industry standards and regulations.

About the Team
You will be part of the Digital Identity Compliance team, a highly collaborative and strategic unit at the core of Digisign's trusted digital identity ecosystem. Our team plays a critical role in ensuring that all Certification Authority (CA) operations are secure, compliant, and aligned with industry standards and regulations. We work closely with internal stakeholders, external regulators, and auditors to maintain and elevate trust in our digital certificate services. As part of this team, you'll be contributing to high-impact decisions related to risk, policy, operations, and compliance in a fast-evolving PKI environment. We combine deep technical expertise with a strong understanding of regulatory frameworks to support a secure and reliable digital infrastructure in Indonesia.
About GoTo Group GoTo Group is the largest digital ecosystem in Indonesia with its mission to "Empower Progress' by offering technological infrastructure and solutions for everyone to access and thrive in the digital economy. The GoTo ecosystem consists of on-demand transportation services, food and grocery delivery, logistics and fulfillment, as well as financial and payment services through the Gojek and GoTo Financial platforms.It is the first platform in Southeast Asia that hosts these crucial cases in a single ecosystem, capturing the majority of Indonesia's vast consumer household.
About Gojek  Gojek is Southeast Asia's leading on-demand platform and pioneer of the multi-service ecosystem with over 2.5 million driver partners across the regions offering a wide range of services such as transportation, food delivery, logistics and more. With its mission to create impact at scale, Gojek is committed to resolving consumer problems and raising standards of living by connecting consumers to the best providers of goods and services in the market.
About GoTo Financial GoTo Financial accelerates financial inclusion through its leading financial services and merchants solutions. Its consumer services include GoPay and GoPayLater and serve businesses of all sizes through Midtrans, Moka, GoBiz Plus, GoBiz, and Selly. With its trusted and inclusive ecosystem of products, GoTo Financial is open to new growth opportunities and aims to empower everyone to Make It Happen, Make It Together, Make It Last.
GoTo and its business units, including Gojek and GoToFinancial ("GoTo") only post job opportunities on our official channels on our respective company websites and on LinkedIn. GoTo is not liable for any job postings or job offers that did not originate from us. You should conduct your own due diligence to prevent being victims of any fake job scams, if they did not originate from GoTo's official recruitment channels.

#LI-ONSITE We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

---