Deskripsi Pekerjaan
PT Sinar Digital Terdepan is seeking a dedicated and analytical IT GRC Specialist to join our growing technology team in Jakarta. In this pivotal role, you will be the guardian of our digital infrastructure, ensuring that our IT operations align with corporate governance, risk management frameworks, and international compliance standards.
As our IT GRC Specialist, you will play a critical role in developing, implementing, and maintaining robust policies that safeguard our organizational assets. You will work closely with cross-functional stakeholders to identify vulnerabilities, mitigate operational risks, and ensure that our digital transformation journey remains secure and compliant with local and global regulations. If you are a proactive professional with a passion for cybersecurity, policy architecture, and risk strategy, we invite you to help us build a more resilient future.
Tanggung Jawab
- Develop and maintain comprehensive IT governance policies, standards, and procedures.
- Conduct regular IT risk assessments to identify, evaluate, and prioritize technology-related risks.
- Ensure continuous compliance with regulatory requirements (ISO 27001, PCI-DSS, local privacy laws).
- Manage and monitor the IT internal control framework to ensure operational effectiveness.
- Lead internal and external audit activities, coordinating with stakeholders to address compliance gaps.
- Collaborate with IT teams to integrate risk-aware security practices into the SDLC (System Development Life Cycle).
- Prepare reports and dashboards for senior management regarding the status of the IT risk and compliance posture.
Kualifikasi
- Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field.
- Minimum 3-5 years of experience in IT Governance, Risk, and Compliance (GRC) or Information Security.
- Strong understanding of frameworks such as ISO 27001, COBIT, NIST, or ITIL.
- Proven ability to interpret complex regulations and translate them into actionable IT policies.
- Excellent communication and stakeholder management skills, with the ability to influence technical and non-technical teams.
- Relevant certifications such as CISA, CRISC, CISM, or CISSP are highly preferred.
- Strong analytical mindset with a meticulous attention to detail.