IT Governance, Risk, and Compliance (GRC)

• Governance: Implement and oversee IT governance frameworks that align IT strategies with business objectives, ensuring effective management and use of information technology.

• Risk Management: Identify, analyze, and mitigate IT-related risks. This includes conducting risk assessments, developing risk management strategies, and maintaining risk registers.

• Compliance: Ensure that IT systems and processes comply with relevant laws, regulations, standards, and internal policies. This involves regular compliance assessments and audits.

• Policy Development and Enforcement: Develop, update, and enforce IT policies and procedures to support governance, risk management, and compliance activities.

• Training and Awareness: Conduct training and awareness programs for employees on IT governance, risk management, and compliance-related topics.

• Reporting: Prepare and present reports to management and other stakeholders on the status of IT governance, risk, and compliance activities.

Requirements:

• Education: A bachelor’s degree in Information Technology, Computer Science, Information Systems, or a related field.

• Experience: min 2 of experience in IT governance, risk management, compliance, or a related field.

• Knowledge of Laws and Standards: Familiarity with relevant IT laws, regulations, and standards (such as BEI Regulation, Cobit, ISO 27001/27002 and etc).

• Analytical Skills: Strong analytical and problem-solving skills to identify and manage risks.

• Communication Skills: Excellent written and verbal communication skills for reporting and educating stakeholders.

• Attention to Detail: High level of attention to detail and accuracy.

• Organizational Skills: Strong organizational and project management skills