Job Description
Key Responsibilities :
- Perform IT audits on systems, applications, and processes to ensure compliance with internal policies and regulatory requirements.
- Evaluate the effectiveness of IT controls, security policies, and governance structures.
- Review system configurations, data management processes, and access control mechanisms to identify vulnerabilities and risks.
Education :
Bachelor’s degree in Information Technology, Computer Science, or a related field.
Experience :
Minimum of 3 years of experience in IT auditing, IT risk management, IT security, or a related field, with strong technical proficiency in coding and systems analysis.Experience in performing audits or reviews for complex IT systems, networks, and security controls.Experience with auditing frameworks like ISO 27001 is a plus.Technical Skills :
Programming Languages, such as Python, PowerShell, Java, SQL, Bash, JavaScript (or any other relevant languages for automation, scripting, and audits).Cybersecurity & Risk Management : Knowledge of firewalls, intrusion detection systems (IDS), encryption protocols, access controls, and vulnerability managementOperating Systems & Databases, such as Linux, Windows Server, SQL Server, MySQL, Oracle, Active Directory.Cloud Security & Services, such as AWS, Google Cloud Platform (GCP), with a focus on security configurations and risk assessments.Version Control, such as Git, GitHub, GitLab (for reviewing and managing code changes in audit environments).Networking, such as TCP / IP, VPNs, DNS, HTTP / HTTPS, and network security fundamentalData Analysis & Reporting, such as Excel, Power BI, Tableau (for visualizing audit results and metrics)Audit Automation : Ability to write and deploy scripts to automate audit processes, data analysis, and reporting (e.g., using Python or PowerShell)Familiarity with penetration testing and vulnerability assessment methodologies and techniques for network, web applications, and infrastructure.Knowledge of information security and data privacy laws that applicable in Indonesia.Certifications :
General IT Certifications : Demonstrates a foundational understanding of IT systems, networks, and infrastructure, such as : CompTIA IT Fundamentals (ITF+), CompTIA A+, CompTIA Network+Coding & Automation Certifications : Emphasizes the candidate’s ability to write scripts and automate tasks for audits and security processes, such as Python Institute – PCEP (Python Programming Certification), Microsoft Certified : PowerShell Scripting, AWS Certified Developer – AssociateInformation Security Certifications : Focuses on securing information systems, understanding cybersecurity principles, and managing risks, such as Certified Information Systems Auditor (CISA), Certified Information Systems Security Professional (CISSP), CompTIA Security+, Certified Ethical Hacker (CEH).Risk Management & Compliance Certifications, such as ISO 27001 : 2022 Information Security Management Systems is a plus.Communication Skills :
Good written and verbal communication skills both in Bahasa Indonesia and English, with the ability to effectively present audit findings and recommendations to senior management and other stakeholders.Ability to collaborate with cross-functional teams, including IT, risk management, and legal departments.