Junior Cyber Security Governance & Compliance
Posted 9
views
Summary
Junior GRC role at the tech arm of Amartha (Indonesian P2P lending fintech), on-site in Jakarta. Day to day: maintain security governance docs and control mappings, write cybersecurity policies, process and approve security assessment tickets, and support ISO 27001 plus internal/external audit preparation using Jira, Confluence, and Microsoft tools.
Job Description
- Manage and maintain security governance mapping documents based on applicable requirements, controls, and organizational standards.
- Develop and maintain cybersecurity policies, procedures, and governance-related documentation.
- Handle assessment tickets related to cybersecurity and governance requirements.
- Assess and validate incoming requests to ensure they comply with applicable security policies and requirements.
- Manage the approval process for security and governance-related requests and documentation.
- Coordinate and follow up on assessment tickets throughout the review and approval process.
- Support ISO-related activities, including preparation and coordination of required documentation and evidence.
- Support internal and external audit activities by preparing documentation, evidence, and required assessments.
- Coordinate with relevant stakeholders to ensure cybersecurity governance and audit requirements are properly addressed.
- Maintain documentation and evidence to support security governance, compliance, and audit readiness.
- Bachelor's degree in Information Technology, Information Systems, Cybersecurity, or a related field.
- Minimum 1 years of experience in IT Security Governance, Information Security, Risk Management, or Compliance.
- Familiar with cybersecurity governance frameworks, security policies, procedures, and control mapping.
- Experience in ISO 27001 compliance, ISMS documentation, and audit preparation is preferred.
- Experienced in supporting internal and external audits, including preparing audit evidence and following up on audit findings.
- Familiar with security assessment processes, compliance reviews, and documentation management.
- Proficient in Jira, Confluence, Microsoft Office, and Microsoft Teams.
- Strong communication, analytical thinking, documentation, and stakeholder coordination skills.
- Detail-oriented, organized, and able to manage multiple assessment requests and follow-up activities.