Epicareer Might not Working Properly
Learn More

IT Governance Risk and Compliance (GRC)

Salary undisclosed

Apply on


Original
Simplified
  • Creating IT Policies, Standards, and Procedures in accordance with industry best practices.
  • Act as an Internal Audit, ensuring that the Policy, Standard, and Procedure are implemented.
  • Maintain the status of ISO 9001, PCI-DSS, and existing audits (audits requested by BI/OJK, and Banks).
  • Implement the COBIT-2019 standard, and strive for PCI-SSF, ISO 27001, and other certifications required according to the company's business field.

Minimum Qualifications

  • Bachelor's degree in Computer Science, Information Systems, Engineering, or a related field.
  • Good understanding of IT security standards and frameworks (e.g., PCI DSS, COBIT, ISO 27001, ISO 27701).
  • Knowledge of relevant local and regional regulations, especially those related to banking or finance (e.g., BI regulations).
  • Basic understanding of network fundamentals.
  • Excellent communication and writing skills.
  • Strong analytical and problem-solving abilities.
  • Experience in developing and managing IT security policies and procedures.
  • Experience in facilitating internal or external IT audits and security risk assessments.
  • Hands-on experience with security assessments (vulnerability scanning, penetration testing).
  • A passion for information security and a commitment to continuous learning are essential.
  • At least 2 years experience in related field are preferable.