Lead Internal Auditor - IT

Location: Jakarta, Indonesia; on-site

Company

hirify.global is a publicly listed Indonesian digital ecosystem providing mobility, delivery, payments, financial services, e-commerce, banking, and merchant technology solutions.

What you will do

• Plan and execute risk-based IT audits covering infrastructure, applications, cloud environments, IT operations, and technology governance.
• Assess IT general controls, application controls, access management, change management, incident management, and related technology processes.
• Evaluate cybersecurity, information security, vulnerability management, business continuity, disaster recovery, data governance, system interfaces, and data flows.
• Conduct risk assessments, walkthroughs, control testing, evidence analysis, and audit documentation.
• Prepare audit findings, identify root causes and impacts, and provide practical recommendations.
• Work with Technology, Information Security, Risk, Compliance, and business stakeholders to validate findings and monitor remediation.

Requirements

• 6–8 years of experience in IT audit, technology risk, information security audit, internal audit, or a related assurance function.
• Strong experience with IT general controls, application controls, cybersecurity, IT operations, cloud technology, data governance, and technology risk management.
• Knowledge of risk-based IT audit methodologies and control frameworks such as COBIT, ISO 27001, or NIST.
• CISA certification is mandatory.
• Familiarity with Indonesian technology and digital regulations, including relevant Komdigi requirements, is highly preferred.
• Strong analytical, communication, stakeholder management, and project management skills, with the ability to translate technical risks into business implications.

Nice to have

• Experience working with technology regulators, government institutions, or regulated technology environments.
• Familiarity with Indonesian regulatory expectations.

Culture & Benefits

• Join the GoTo Internal Audit function supporting the Board’s oversight role and Management guidance.
• Work across Gojek, Tokopedia, and GoTo Financial.
• Contribute to stronger controls, governance, operational efficiency, asset protection, and regulatory compliance.
• Gain exposure to complex technology environments across a large digital ecosystem.