IT GRC (ProjectBased 3 month)
Must-have:DataFinTechSecurity
- At least 3 years of experience in IT Governance, IT Risk Management, IT Audit, Information Security, or Compliance, preferably in the banking industry.
- Understanding of regulations related to IT implementation in banking (OJK, BI, LPS, the Personal Data Protection Law, and other related provisions).
- Understanding of IT governance frameworks and standards, such as COBIT 2019, ITIL, ISO/IEC 27001, ISO 27701, ISO 22301, the NIST Cybersecurity Framework, and others.
- Understanding of IT risk management, cybersecurity, and third-party risk management.
- Able to prepare and review IT policies, standards, and procedures in accordance with regulatory requirements.
- Able to conduct IT risk assessments, such as Key Risk Indicators (KRI), Risk Control Self Assessment (RCSA), and others.
- Able to conduct IT assessments, such as assessing cybersecurity maturity levels and IT governance.
- Able to prepare IT reports submitted to regulators.
- Able to handle audit examinations from regulators, internal audit, and external audit, including monitoring the follow-up of audit findings.
- Able to coordinate and communicate across work units.
- Plus points for holding COBIT 2019, ISO, and other certifications.