23 часа назад
Senior GRC
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Senior GRC (Cybersecurity and Compliance): Designing enterprise security control frameworks and managing risk and regulatory compliance in Indonesia with an accent on ISO 27001, NIST, Indonesian data privacy requirements, and third-party risk. Focus on coordinating audits, reporting cyber risk to leadership, and governing IAM/PAM controls, RBAC, least privilege, and segregation of duties.
Location: Jakarta, Indonesia; hybrid workplace
Company
Building financial inclusion products and services for the Indonesian market.
What you will do
- Develop, maintain, and enforce corporate security policies, standards, and enterprise control frameworks.
- Perform enterprise and IT risk assessments, maintain risk registers, track remediation roadmaps, and report cyber risk posture to leadership.
- Lead compliance with Indonesian data privacy, financial-sector, and technology regulations, including UU PDP, OJK regulations, and Kominfo requirements.
- Coordinate audit readiness and act as the primary liaison with external auditors, Bank Indonesia, OJK, and other regulatory bodies.
- Evaluate vendor and supply-chain security risks during onboarding and monitor compliance with security standards.
- Govern IAM/PAM controls, including provisioning, RBAC, least privilege, segregation of duties, and administrative-account access.
Requirements
- 8+ years of experience in cybersecurity, IT risk management, or information security.
- Deep experience navigating the Indonesian regulatory environment.
- At least 3–4 years in a senior or lead capacity.
- Hands-on experience implementing ISO/IEC 27001, NIST CSF, COBIT, and CIS benchmarks.
- Ability to translate complex technical concepts into actionable business terms for executives.
Nice to have
- CISSP, CISA, or CRISC certification.
Culture & Benefits
- Work in a hybrid environment.
- Contribute to increasing financial inclusion in Indonesia.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →