Governance & Compliance Manager

Job Title: Governance & Compliance Manager

Work Location: Rasuna Said, Jakarta Selatan

Department: Security, Data Governance & Compliance

Working Arrangement: Monday to Friday, Business Hours

Reports To: Service Delivery Manager

Experience Required: Minimum 7 years

Positions Available: 1

Job Description

We are looking for an experienced Governance & Compliance Manager to lead the security and data governance framework for our engagement. The successful candidate will be responsible for developing and maintaining information security policies, managing risk assessments, ensuring regulatory compliance, leading audit readiness, and overseeing data governance practices.

Key Responsibilities

• Develop, maintain, and implement information security policies and standards applicable to the service.
• Lead the security and data risk assessment cycle, including risk identification, assessment, treatment, and reporting.
• Ensure compliance with ISO/IEC 27001, personal data protection regulations, and applicable sector-specific requirements.
• Prepare and lead client, certification, and regulatory audits.
• Establish and maintain the data governance framework, covering data ownership, classification, quality, and lifecycle management.
• Identify control gaps and advise the Service Delivery Manager on remediation strategies, including cost considerations.
• Provide governance and compliance advisory to support the organization's security posture and regulatory obligations.

Requirements

• Minimum 7 years of experience in Governance, Risk, and Compliance (GRC), with demonstrated ownership of GRC frameworks.
• Strong expertise in security governance, including policy and standards development, risk assessment, control design, and audit readiness.
• Solid understanding of regulatory compliance and personal data protection requirements.
• Experience with ISO/IEC 27001, NIST Cybersecurity Framework (NIST CSF), Indonesia's Personal Data Protection Law (UU PDP), and applicable OJK/POJK regulations.
• Familiarity with Governance, Risk, and Compliance (GRC) platforms.
• Strong analytical, communication, stakeholder management, and problem-solving skills.

Preferred Certifications

• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager (CISM)
• ISO/IEC 27001 Lead Auditor

Relevant certifications are preferred but not mandatory.