← All roles

Lead Internal Auditor - IT - Digital Signature

GoTo· GoTo Internal Audit
Apply on company site
JakartaPermanentPosted 3w ago

About the role

Lead end-to-end risk-based IT audits focusing on technology processes, IT controls, cybersecurity, data management, and system environments. Identify control gaps and technology risks, evaluate regulatory compliance, and translate audit findings into practical recommendations to strengthen governance, security, and resilience.

Responsibilities

  • IT & Risk-Based Audit Execution: Plan and execute risk-based IT audits covering technology infrastructure, applications, cloud environments, IT operations, and technology governance.
  • IT Controls Assessment: Assess IT general controls, application controls, access management, change management, incident management, and other key technology processes.
  • Cybersecurity & Technology Risk: Evaluate cybersecurity, information security, vulnerability management, business continuity, disaster recovery, and other technology-related risks.
  • Data & System Audit: Assess data governance, data integrity, system interfaces, data flows, and controls over critical systems and information assets.
  • Audit Planning & Fieldwork: Conduct risk assessments, define audit procedures, perform walkthroughs and control testing, analyze evidence, and maintain audit documentation.
  • Reporting & Recommendations: Develop clear audit findings, identify root causes and impacts, and provide practical recommendations to strengthen IT controls and mitigate technology risks.
  • Stakeholder & Remediation Management: Work with Technology, Information Security, Risk, Compliance, and business stakeholders to validate findings and monitor remediation.

Qualifications

  • 6–8 years of experience in IT audit, technology risk, information security audit, internal audit, or related assurance functions.
  • Strong experience in IT general controls, application controls, cybersecurity, IT operations, cloud technology, data governance, and technology risk management.
  • Strong knowledge of risk-based IT audit methodologies and IT control frameworks, with familiarity with COBIT, ISO 27001, NIST, or similar frameworks.
  • CISA (Certified Information Systems Auditor) certification is mandatory.
  • Familiarity with Indonesian technology and digital regulations, including relevant Komdigi requirements and regulatory expectations, is highly preferred.
  • Experience working with technology regulators, government institutions, or regulated technology environments is highly preferred.
  • Strong analytical, communication, stakeholder management, and project management skills, with the ability to translate technical risks into clear business implications.

Skills

Required:IT general controlsCybersecurityData governance
Last updated Oct 21, 2026. Interested? Apply on the company site.
GoTo logo

About GoTo

Go Together, Go Far

Kami adalah perusahaan teknologi nomor 1 di Indonesia. GoTo berdedikasi untuk menciptakan dampak sosial berskala besar di manapun kami beroperasi.

Teknologi
Company profileWebsite

More open roles at GoTo