We are looking for a detail-oriented and experienced IT Governance, Risk & Compliance (IT GRC) professional to join our major client in the Mining Industry. In this role, you will be responsible for ensuring that the organization's IT systems, services, and infrastructure operate in accordance with sound IT governance, security, risk management, and compliance practices.
📍 Location: South Jakarta
📅 Employment: Contract-based, 6 months (extendable)
💻 Work Type: Fully Onsite
Job Requirements:
- Minimum Bachelor's Degree in Information Technology, Computer Science, Information Systems, or a related field.
- Minimum 2–3 years of relevant experience in IT Governance, Risk, Compliance, IT Audit, Information Security, or related areas.
- Strong understanding of fundamental information security concepts and technologies.
- Experience in IT Governance, Risk & Compliance management, preferably within a large or complex organization.
- Experience in designing, developing, obtaining approval for, implementing, and managing changes to IT policies, SOPs, governance frameworks, and compliance processes.
- Relevant certification in IT Security or Information Security will be a plus.
Job Responsibilities:
- Advise the Board and Senior Management on IT governance, internal controls, SOPs, risk management, audit practices, and industry best practices.
- Conduct internal IT audits to assess organizational and program compliance with internal policies, regulatory requirements, data protection standards, and contractual obligations.
- Perform security and compliance assessments for new and existing systems, processes, and technologies.
- Collaborate with relevant stakeholders to define IT security standards and develop supporting policies and procedures.
- Work closely with various business units and departments to ensure that IT controls are adequate, appropriate, effective, and consistently implemented.
- Participate in Disaster Recovery (DR) and Business Continuity Planning (BCP), including backup and recovery processes.
- Conduct Business Impact Analysis (BIA) and assist in the development and maintenance of the IT Risk Register.
- Stay up to date with evolving regulatory requirements, emerging compliance concerns, and the latest trends in IT and information security.
- Design, provide consultation on, obtain management approval for, implement, and manage changes to corporate compliance and risk management processes.