Deskripsi Pekerjaan
We are seeking a highly skilled IT Governance professional to join Dipo Star Finance's dynamic team. In this critical role, you will design, implement, and monitor robust IT governance frameworks that align with business objectives and regulatory requirements. You'll drive the integration of risk management practices, ensuring comprehensive compliance with industry standards and internal policies while maintaining rigorous security controls to protect our digital assets. This position requires a strategic thinker who can translate complex technical requirements into actionable governance plans while fostering cross-departmental collaboration.
The ideal candidate will have extensive experience in establishing IT governance roadmaps, conducting risk assessments, and implementing compliance frameworks. You will play a pivotal role in bridging the gap between technical teams and executive leadership, providing clear insights on IT risks, controls, and performance metrics. Your expertise will be instrumental in developing policies, procedures, and monitoring mechanisms that ensure operational resilience and regulatory adherence in an increasingly complex digital landscape.
Tanggung Jawab
- Develop and implement comprehensive IT governance frameworks aligned with industry standards (COBIT, ITIL, ISO 27001)
- Lead IT risk management processes including identification, assessment, and mitigation strategies
- Ensure compliance with regulatory requirements (OJK, Bank Indonesia, GDPR) through continuous monitoring
- Design and maintain robust security controls to protect sensitive financial data
- Conduct periodic IT audits and assessments to evaluate control effectiveness
- Establish KPIs and reporting mechanisms for governance performance
- Collaborate with IT and business teams to embed governance into IT processes
Kualifikasi
- Bachelor's degree in Computer Science, Information Systems, or related field (Master's preferred)
- 5+ years of experience in IT governance, risk management, or compliance roles
- Professional certifications (CISA, CISSP, CISM, or COBIT Implementation)
- Deep understanding of financial industry regulations and IT control frameworks
- Experience with GRC tools (e.g., RSA Archer, LogicGate, MetricStream)
- Strong analytical skills with ability to interpret complex technical requirements
- Excellent communication skills with ability to present to executive stakeholders