Internal Audit Manager - IT

About the role

We are seeking an experienced Internal Audit Manager with deep expertise in IT audit, payment systems, and technology risk. You will lead risk‑based audit activities across our technology infrastructure, payment operations, and cybersecurity landscape, ensuring compliance with Bank Indonesia regulations and industry standards.

Key responsibilities

• Develop and execute an annual IT risk‑based audit plan covering core payment systems, cloud infrastructure, databases, networks, APIs and gateway integrations.
• Assess information security controls such as ISO 27001, vulnerability management, penetration testing, IAM and cyber‑resilience.
• Review SDLC, change management and business continuity/disaster recovery plans to ensure governance and resilience.
• Conduct end‑to‑end audits of payment transaction flows, fund management, fraud detection and dispute handling.
• Support regulatory examinations and certification audits (Bank Indonesia, ISO 27001, PCI‑DSS) and translate findings into actionable improvements.

Required profile

• Bachelor’s degree in Information Systems, Computer Science, IT, or related field.
• Minimum 5 years of experience in IT audit, payment systems audit or GRC, with 2–3 years in a managerial or lead auditor role.
• Hands‑on experience auditing payment systems, technology infrastructure and cybersecurity within a fintech or payment service provider.
• Strong knowledge of Bank Indonesia regulations, AML/CFT requirements and payment system architecture (PJP Category 1).
• Excellent communication skills in Bahasa Indonesia and English.

Required skills

• ISO 27001 and PCI‑DSS standards knowledge.
• SQL for data extraction and analysis.
• Python for audit automation and analytics.
• Familiarity with IAM, vulnerability management and penetration testing concepts.
• Relevant certifications such as CISA, CRISC, CISM, CIA/QIA or CFE are a plus.