Governance Risk Compliance
Posted Updated
Summary
Governance, Risk & Compliance specialist at Amartha's tech entity in Central Jakarta, maintaining security governance documentation, cybersecurity policies, and assessment/approval workflows, while supporting ISO 27001 activities and internal/external audits. Core tools include Jira, Confluence, and Microsoft Office/Teams.
- Manage and maintain security governance mapping documents based on applicable requirements, controls, and organizational standards.
- Develop and maintain cybersecurity policies, procedures, and governance-related documentation.
- Handle assessment tickets related to cybersecurity and governance requirements.
- Assess and validate incoming requests to ensure they comply with applicable security policies and requirements.
- Manage the approval process for security and governance-related requests and documentation.
- Coordinate and follow up on assessment tickets throughout the review and approval process.
- Support ISO-related activities, including preparation and coordination of required documentation and evidence.
- Support internal and external audit activities by preparing documentation, evidence, and required assessments.
- Coordinate with relevant stakeholders to ensure cybersecurity governance and audit requirements are properly addressed.
- Maintain documentation and evidence to support security governance, compliance, and audit readiness.
- Bachelor's degree in Information Technology, Information Systems, Cybersecurity, or a related field.
- Minimum 2 years of experience in IT Security Governance, Information Security, Risk Management, or Compliance.
- Familiar with cybersecurity governance frameworks, security policies, procedures, and control mapping.
- Experience in ISO 27001 compliance, ISMS documentation, and audit preparation is preferred.
- Experienced in supporting internal and external audits, including preparing audit evidence and following up on audit findings.
- Familiar with security assessment processes, compliance reviews, and documentation management.
- Proficient in Jira, Confluence, Microsoft Office, and Microsoft Teams.
- Strong communication, analytical thinking, documentation, and stakeholder coordination skills.
- Detail-oriented, organized, and able to manage multiple assessment requests and follow-up activities.