IT GRC Specialist (SDE 2)

Kredivo Group


Tanggal: 2 jam yang lalu
Kota: Pekerjaan jarak jauh, Pekerjaan jarak jauh
Jenis kontrak: Penuh waktu
Jarak jauh
You’ll run two of Kredivo Group’s core compliance processes day to day: vendor security assessments and user access reviews, across all Group entities. You’ll also support IT audits with evidence and follow-up. You’ll work under guidance from senior team members and take on more ownership as you grow.

About The Job

  • Run two of Kredivo Group’s core compliance processes day to day: vendor security assessments and user access reviews, across all Group entities. You’ll also support IT audits with evidence and follow-up. You’ll work under guidance from senior team members and take on more ownership as you grow.
  • Vendor security: Run security assessments for new and existing technology vendors: send questionnaires, collect evidence, review responses, and flag risks.
  • Check that contracts with technology vendors include the required information security terms.
  • Keep the vendor inventory and assessment records up to date, and follow up on vendor remediation.
  • Use and improve the team’s existing automation for vendor assessments.
  • Access reviews: Run periodic user access reviews across systems and entities: pull access lists, send them to system owners, track sign-off, and make sure removals actually happen.
  • Check that access provisioning and removal follow policy and least privilege.
  • Log exceptions and track them to closure.
  • Help move access reviews to continuous compliance as our tooling matures.
  • Audit and compliance support: Prepare evidence for IT audits and assessments, such as ITGC, ISO 27001, OJK, Bank Indonesia and partner security reviews.
  • Track findings related to vendor security and access control on the audit issue board, and follow up with owners until they close.
  • Support the Security Awareness team with compliance tracking.
  • Report on your processes: reviews completed, overdue items, and vendor risk ratings.

About You

  • Bachelor’s degree in Information Technology, Computer Science, Cybersecurity or a related field.
  • 3- 5 years in IT GRC, IT audit or information security, preferably in financial services, fintech or banking.
  • Hands-on experience with access reviews or third-party/vendor risk assessments.
  • Understanding of security frameworks (e.g. ISO 27001, NIST CSF, COBIT) and local regulations such as OJK and Bank Indonesia.
  • Experience supporting audits: preparing evidence and responding to auditor requests.
  • Organised and detail-oriented, able to run recurring processes on time across many stakeholders.
  • Comfortable following up persistently with teams you don’t manage.
  • Good written and spoken English and Bahasa Indonesia.
  • Nice to have: Experience at a consulting or audit firm in IT audit, risk or compliance. CISA or ISO 27001 Lead Auditor, or working towards one. Experience with GRC tools or workflow automation (e.g. Jira, n8n).

Cara melamar

Untuk melamar pekerjaan ini, Anda perlu otorisasi di situs web kami. Jika Anda belum memiliki akun, silakan daftar.

Posting CV

Pekerjaan serupa

Security Managed Services Engineer (L1)

NTT DATA, Inc., Pekerjaan jarak jauh, Pekerjaan jarak jauh
28 menit yang lalu
Make an impact with NTT DATAJoin a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive.Your day at NTT DATAAs a Security...

Commercial Property Underwriter - Zurich Asuransi Indonesia

Zurich Insurance, Pekerjaan jarak jauh, Pekerjaan jarak jauh
57 menit yang lalu
Job SummaryThe Commercial Property Underwriter is responsible for evaluating, analyzing, and underwriting commercial property insurance risks. This role ensures that all submissions comply with the company's underwriting guidelines while maintaining portfolio profitability and delivering appropriate insurance solutions to clients.Job QualificationsRequired:Bachelor's Degree in Insurance, Risk Management, Finance, Business Administration, Engineering, or a related field.Minimum 4 years of experience in Property Underwriting,...

Manager, Corporate Development, Asia

Sony Music Entertainment, Pekerjaan jarak jauh, Pekerjaan jarak jauh
3 jam yang lalu
Established in 1997, Sony Music Entertainment is an indirect wholly owned subsidiary of Sony Group Corporation, Japan, with a presence in over 100 countries through our affiliates. We have nurtured some of music's most iconic artists and produced some of the most influential recordings of all time.Sony Music's Corporate Development team for Asia & the Middle East works across some...