IT Compliance

The IT Risk and Compliance Senior Officer is responsible for supporting, executing, and continuously improving the organization’s IT governance, risk, and compliance (GRC) activities. This role focuses on hands-on implementation, operational oversight, and audit support for ISO/IEC 27001 (internal and external audits), as well as compliance with GDPR / PDP Regulation and NIST requirements. The role ensures that governance and security controls are effectively embedded across project delivery, change management, design reviews, audit processes, and policy lifecycle within a technology-focused organization.

• Support the implementation, operation, and continuous improvement of the ISO/IEC 27001 Information Security Management System (ISMS).
• Execute compliance activities related to GDPR and applicable data protection regulations.
• Assist in mapping, maintaining, and monitoring security controls aligned with NIST CSF / NIST SP 800 series.
• Maintain compliance documentation, evidence, and records required for audits and assessments.

• Strong knowledge of IT Governance, IT Controls, and Information Security Controls
• Hands-on understanding of ISO/IEC 27001 (Clauses & Annex
  
  A), GDPR/PDP Regulation, NIST CSF / NIST SP 800
• Experience in control design, control implementation, and control effectiveness assessment
• Skilled in risk assessment, risk register management, and risk treatment tracking
• High attention to detail with strong documentation, evidence management, and audit support skills
• Experience in developing and maintaining policies, standards, procedures, and guidelines
• Ability to translate regulatory and security standards into operational and technical controls
• Familiar with secure-by-design and privacy-by-design principles
• Experience supporting project governance, SDLC controls, and compliance checkpoints
• Exposure to Change Control Board (CCB) and Design Review Board (DRB) processes
• Strong stakeholder communication and coordination across IT, Security, Engineering, PMO, and Legal
• Ability to prepare compliance reports, risk summaries, and management documentation
• Self-motivated, able to work independently with minimal supervision

When we stand united, there’s nothing we can’t achieve.

Leading the future of technology with innovative solutions that transform businesses and drive sustainable growth.

GDC (Gtech Development Center),Jl. Jend. Sudirman No.15, Sukasari, Kec.

Tangerang, Kota Tangerang, Banten 15118, Indonesia