IT GRC Manager - Digital Identity

Jakarta · 5+ years experience · Full-time · Onsite · Posted Sep 28, 2026

At a glance

GoTo is the largest digital ecosystem in Indonesia. GoTo's mission is to 'empower progress' by offering technology infrastructure and solutions that help everyone to access and thrive in the digital economy.
The GoTo ecosystem provides a wide range of services, including mobility, delivery, payments, financial services, and technology solutions for merchants. The ecosystem also provides e-commerce services through Tokopedia and banking services through its partnership with Bank Jago.

The IT GRC Manager will spearhead the development and implementation of a governance, risk, and compliance framework tailored to identity services products.
The role involves bridging the gap between policy and practice, monitoring internal controls, and driving the organization toward ISO 27001 and ISO 27701 certifications.
The manager will act as a liaison between engineering, legal, and partner teams to ensure security controls are integrated into lending and identity platforms.

Coordinate with the compliance team to ensure initiatives, development, and collaborations comply with internal and external standards.
Conduct routine evaluations of policy and procedure implementation to ensure best-practice risk mitigation.
Act as a Subject Matter Expert to stakeholders regarding IT GRC requirements in lending and identity products.
Ensure effective governance, risk management, and compliance across the organization.
Develop and maintain compliance, governance, and risk-related IT and business process flows.
Coordinate with IT work units to follow up on data requests, internal audit findings, external audits, and regulators.
Develop processes and conduct activities to safeguard or archive IT development documents regularly.
Implement good governance using ISO 27001, ISO 27701, and other relevant technology and security best practices.

Minimum of 5 years of experience in IT governance, risk management, and compliance.
Experience with PSrE, ISO 27001, ISO 27701, ITIL, and COBIT.
Proven track record of successfully leading and achieving ISO 27001 and ISO 27701 certifications.
Excellent stakeholder management skills with the ability to communicate and influence at all levels.
Demonstrated ability to deliver results with limited resources and minimal supervision.
Extensive experience in managing and navigating regulatory audits.
Strong leadership skills with the ability to lead a small team and foster a collaborative environment.
Strong adaptability and flexibility to take on new areas of responsibility.