Internal Audit Manager (Fintech)

Location: Jakarta, Indonesia

Company

hirify.global operates in the fintech and payment services sector.

What you will do

• Develop and execute risk-based IT audit plans covering technology infrastructure, payment systems, cloud services, databases, networks, APIs, and payment gateway integrations.
• Assess information security, IAM, vulnerability management, penetration testing, SDLC, change management, cyber resilience, BCP, and DRP controls.
• Audit end-to-end payment flows, including issuing, acquiring, switching, clearing, settlement, fund reconciliation, fraud controls, and chargeback management.
• Evaluate compliance with Bank Indonesia requirements, payment service provider regulations, the National Payment System framework, IT risk management, AML/CFT, and data protection requirements.
• Lead audits from risk assessment and fieldwork through reporting and follow-up, including corrective action plans and remediation monitoring.
• Analyze transaction data to identify anomalies and present significant findings to senior management, the Board of Directors, and the Audit Committee.

Requirements

• Bachelor’s degree in Information Systems, Computer Science, Information Technology, Accounting Information Systems, or a related field.
• At least 5 years of experience in IT audit, payment systems audit, IT governance, GRC, or a related field, including 2–3 years at Manager, Assistant Manager, or Lead Auditor level.
• Hands-on experience auditing payment systems, technology infrastructure, cybersecurity, and technology risk, preferably in a payment service provider, fintech, banking, switching, or payment gateway environment.
• ISO 27001:2022 Information Security Management Systems certification is required.
• Strong knowledge of payment system architecture and operations, especially PJP Category 1, electronic money, fund transfers, payment gateways, reconciliation, and settlement.
• Excellent written and verbal communication skills in Bahasa Indonesia and English are required.

Nice to have

• Experience with Bank Indonesia regulatory examinations and ISO 27001 or PCI-DSS certification audits.
• Additional certifications such as CISA, CRISC, CISM, CIA/QIA, or CFE.
• Familiarity with SQL, Python, and automation tools for data analytics and audit automation.

Culture & Benefits

• Work in a fast-paced, evolving environment where technology and payment processes continuously change.
• Collaborate with business, technology, risk, compliance, senior management, and board-level stakeholders.