IT GRC Specialist

 IT Risk & Control Analyst

About The Role

Support the Technology Risk function in providing independent second-line risk oversight and analytical assurance across technology, financial reporting, and regulatory initiatives. The role focuses on risk analysis, control evaluation, and governance effectiveness, ensuring alignment with OJK/BI regulations, internal risk standards, and industry best practices. The position will also support several bank-wide strategic programs, including regulatory and control transformation initiatives.

Key Responsibilities

1. Technology Risk & Control Oversight

• Perform independent review of IT and cybersecurity controls domains

• Assess design and operating effectiveness of key IT controls.

• Identify control gaps, assess risk impact, and recommend remediation actions.

2. Risk Assessment & Governance

• Support IT Risk Assessment / RCSA activities for technology and digital initiatives.

• Assist in identifying emerging technology risks (cloud, SaaS, third-party, automation).

• Maintain risk registers, control mapping, and issue tracking.

3. Regulatory & Compliance Support

• Support compliance with OJK / BI regulations, internal policies, and minimum control standards.

• Prepare materials for regulator inquiries, audits, and internal reviews.

• Track remediation progress for audit and regulatory findings.

4. Stakeholder Engagement

• Liaise with Technology, Security, and Product teams to clarify control requirements.

• Provide risk advisory support

• Communicate risk matters clearly to non-risk stakeholders.

5. Reporting & Documentation

• Prepare risk reports, dashboards, and management summaries.

• Assist in preparing materials for Risk Committee / senior management.

• Maintain structured documentation to support governance and audit readiness.

• Assist in regulatory reports review