IT Governance, Risk, and Compliance

Lead IT governance, risk, and compliance initiatives in line with business objectives, regulatory requirements, and best practices. Own and lead ISO 27001 audits (surveillance and recertification), acting as the main liaison with external auditors. Lead IT audits, VAPT coordination, and remediation planning, ensuring timely and effective closure of findings. Represent the company during regulatory audits, including Bank Indonesia audits, and manage audit responses end-to-end. Make risk-based dec