Associate Information Security Auditor

• Key Responsibilities
• Regulatory & Compliance Audit Support
• Assist in the execution of cybersecurity regulatory audits in alignment with:
• PBI (Bank Indonesia regulations)
• POJK (OJK cybersecurity regulations)
• Other applicable sectoral regulatory requirements
• Conduct control walkthroughs and perform evidence validation procedures.
• Support gap assessments and compliance mapping initiatives.
• ISO 27001 & ISO 27002 Engagements
• Support the implementation of ISO 27001:2022 gap assessments.
• Assist in facilitating risk assessment workshops and developing risk registers.
• Contribute to the preparation of the Statement of Applicability (SoA).
• Review organizational policies and procedures against Annex A control requirements.
• Support audit readiness activities in preparation for certification audits.
• Risk & Governance Assessment
• Assist in identifying control deficiencies and assessing potential risk exposure.
• Document risk impacts and provide practical, well-founded recommendations.
• Audit Documentation & Reporting
• Prepare audit working papers and maintain supporting evidence documentation.
• Draft designated sections of audit and advisory reports.
• Communicate audit findings in a structured, clear, and professional manner.
• Monitor remediation progress, where applicable.
• Client Engagement Support
• Participate in client meetings and workshops in a professional capacity.
• Translate technical findings into clear and concise business language suitable for stakeholders.

Qualifications

Bachelor’s degree in Information Technology, Cybersecurity, Information Systems, or a related discipline.

0–2 years of relevant experience in IT audit, cybersecurity, risk management, or compliance (strong fresh graduates are encouraged to apply).

Foundational knowledge of

• ISO 27001 framework
• IT General Controls (ITGC)
• Risk assessment methodologies

Familiarity with

• Networking fundamentals (TCP/IP, segmentation)
• Firewall, VPN, and Identity & Access Management (IAM) concepts
• Basic principles of incident response and business continuity
• Strong analytical, organizational, and documentation skills.
• Demonstrated integrity and a high level of attention to detail.
• Preferred Qualifications
• Exposure to regulatory compliance frameworks (PBI/POJK).
• Familiarity with ISO 27001:2022 standards.
• Interest in pursuing professional certifications (e.g., CISA, ISO Lead Auditor/Lead Implementor).
• Strong written English proficiency for formal report preparation.