IT GRC Analyst

📋 Description

• Own and support compliance programs for certification and audits; ensure controls are implemented and tested.
• Serve as primary GRC contact for regional regulatory needs; coordinate IT audits with regional bodies.
• Manage full certification lifecycle (scoping, gap analysis, issuance, surveillance).
• Conduct periodic IT risk assessments across markets; maintain risk register and track remediation.
• Perform internal control testing to evaluate IT control design and operation.
• Identify gaps across markets and coordinate remediation plans.

🎯 Requirements

• 3–5 years in IT GRC, IT risk, or IT compliance roles.
• PCI-DSS and ISO 27001 knowledge with implementation, certification, and audit readiness.
• Familiarity with Bank Indonesia (BI) and OJK regulations for payment providers.
• Willingness to address regulatory requirements in another Southeast Asian or international market (e.g., BSP, BOT, MAS, BNM).
• Proven experience conducting IT risk assessments, control testing, and gap analyses.
• Develop, review, and maintain IT policies, standards, and procedures.