IT Governance Risk and Compliance (GRC)
Salary undisclosed
Apply on
Original
Simplified
- Creating IT Policies, Standards, and Procedures in accordance with industry best practices.
- Act as an Internal Audit, ensuring that the Policy, Standard, and Procedure are implemented.
- Maintain the status of ISO 9001, PCI-DSS, and existing audits (audits requested by BI/OJK, and Banks).
- Implement the COBIT-2019 standard, and strive for PCI-SSF, ISO 27001, and other certifications required according to the company's business field.
- Bachelor's degree in Computer Science, Information Systems, Engineering, or a related field.
- Good understanding of IT security standards and frameworks (e.g., PCI DSS, COBIT, ISO 27001, ISO 27701).
- Knowledge of relevant local and regional regulations, especially those related to banking or finance (e.g., BI regulations).
- Basic understanding of network fundamentals.
- Excellent communication and writing skills.
- Strong analytical and problem-solving abilities.
- Experience in developing and managing IT security policies and procedures.
- Experience in facilitating internal or external IT audits and security risk assessments.
- Hands-on experience with security assessments (vulnerability scanning, penetration testing).
- A passion for information security and a commitment to continuous learning are essential.
- At least 2 years experience in related field are preferable.
Similar Jobs