IT GRC
Summary
IT GRC specialist at Monee, a Southeast Asian digital payments and financial services provider (part of Sea Limited), based in Jakarta. Day to day: building IT policies and risk registers, running risk assessments, driving compliance with frameworks like ISO 27001, SOC2, GDPR and PDPA, and preparing evidence for internal/external audits alongside security and engineering teams.
Monee is a leading digital payments and financial services provider in Southeast Asia, with a growing presence in Latin America. Its mission is to better the lives of individuals and businesses in the region with financial services through technology.
Monee delivers a comprehensive range of digital financial products and services, including mobile wallets, payment processing, credit, banking, and insurtech. By leveraging technology and strategic partnerships, Monee aims to drive greater digital financial inclusion, convenience, and accessibility for individuals and small businesses across Southeast Asia and Latin America.
Monee is part of Sea Limited, a global technology company.
- Build and maintain IT policies, standards, and governance processes
- Conduct IT risk assessments and maintain the risk register
- Identify, evaluate, and track remediation of technology risks
- Drive compliance initiatives (ISO 27001, SOC2, GDPR, PDPA, etc.) and some audit relate to regulation.
- Prepare documentation, evidence, and coordination for internal/external audits
- Work with security and engineering teams to validate and improve controls
- Support security awareness and incident response processes
- Bachelor’s degree or equivalent in Information Technology or Computer Science.
- Minimum of 2 years work experience as IT GRC, Audit, and Security roles.
- Has experienced in working in a Financial Institutions is Preferred.
- Experience in IT GRC, information security, or cybersecurity
- Good understanding of ISO 27001, NIST, COBIT, SOC2
- Strong risk assessment, documentation, and communication skills
- Ability to work cross‑functionally with technical and non‑technical teams
- Strong analytical skills and attention to detail.