- Make recommendations to senior management to create IT GRC policies that would improve internal control and security posture of the company while satisfying the consideration of all stakeholders including: business users, HR, compliance, legal, etc
- Become the main PIC to drive change management and implementation for IT GRC policies.
- Become the main PIC for communicating things related to IT Security, Risk, Governance and Compliance for both internal and external stakeholders.
- Working closely with senior management personnel across the organization to understand the organization’s contexts, strategy and governance needs to adapt policies accordingly
- Liaising with stakeholders to design effective governance policies for company operations and regulatory compliance
- Working with the security, data, compliance, and legal teams to redefine the requirements of our systems’ implementation and processes
- Overseeing the implementation of the governance policies across the organization
- Contributing to the improvements of the company’s security policies and processes
- Bachelor's degree in computer science or related fields, or equivalent work experience
- Strong logical & problem solving skills
- Excellent verbal/written communication & organizational skills
- Have leadership and negotiation skills
- Knowledge of cybersecurity standards such as ISO 27001, PCI-DSS, and SOC2
- Knowledge of regulations such as POJK and UU PDP
- Knowledge of cybersecurity frameworks
- Extensive experience 4-8 years in IT governance industry is preferred
- Advanced degree or cybersecurity certification (CISSP, CISA) is a plus
- Having Protection Officer certification is a plus