We are seeking high-performing IT GRC professionals to join our Digital Risk service line. In this role, you will go beyond execution; you will be a trusted advisor to our international and local clients, helping them navigate the complex landscape of technology risk, IT governance, and digital transformation. You will leverage Enterprise Architecture principles (TOGAF) to evaluate, design, and govern robust IT environments, lead execution during audit fieldworks, and spearhead high-impact advisory projects to ensure our clients systems are secure, compliant, and aligned with business strategy.
Work You Will Do:
- Lead and manage end-to-end IT Audit engagements (internal and external), ensuring high-quality deliverables and strict adherence to PBI, POJK, and international standards.
- Design and implement robust IT Governance frameworks and policies tailored to client-specific business needs using TOGAF and COBIT methodologies.
- Utilize TOGAF Enterprise Architecture models to identify, analyze, and architect mitigation strategies for complex IT risks, operational gaps, and compliance issues.
- Act as a subject matter expert on PBI and POJK regulations, providing deep insights and ensuring clients stay ahead of regulatory compliance changes.
- Apply and integrate industry frameworks such as TOGAF, COBIT, ISO 27001, NIST, and ITIL to elevate client governance and risk maturity.
- Oversee multiple client engagements simultaneously, managing timelines, budgets, and team performance.
- Guide and develop junior associates, fostering a culture of continuous learning and technical excellence in IT GRC.
Minimum Qualifications
- TOGAF Certification is REQUIRED (TOGAF 9 Level 2 / TOGAF Enterprise Architecture Practitioner Certified).
- Minimum 1+ year(s) of professional experience in IT GRC, IT Governance, IT Advisory, or IT Audit.
- Bachelor's degree in Information Information Systems, Information Technology, Computer Science, or a related field.
- Proven ability to apply TOGAF concepts within IT GRC, IT risk assessment, or IT governance frameworks.
- Strong working knowledge of Indonesian financial regulations, specifically PBI and POJK.
- Proven track record of leading teams and managing client engagements from inception to completion.
- Additional certifications such as COBIT, ISO 27001, CISA, CISM, CISSP, or CRISC are a strong plus.
- Advanced problem-solving capabilities with the ability to translate technical architecture and IT risks into business impact.
- Exceptional verbal and written communication skills in both Indonesian and English.
- High integrity, proactive attitude, and the ability to thrive in a fast-paced, collaborative environment.
