GRC & Cybersecurity Compliance Specialist

Requirements:

1. Min ±8 years in IT
2. Min +3 years in GRC & Cybersecurity
3. Governance, Risk & Compliance framework ownership: ISO 27001, NIST CSF, COBIT 2019
4. OJK regulatory mapping: POJK 11/2022, SEOJK 29/2022 gap analysis and evidence collection
5. Third-party / vendor risk assessment and periodic review
6. Security policy lifecycle: drafting, review cadence, board submission
7. Audit liaison: internal audit, OJK examination, external assessors
8. RCSA management, control effectiveness testing, risk register maintenance

Key Activities:

1. OJK self-assessment preparation and evidence packaging per POJK 11/2022 & SEOJK 29/2022
2. Security policy annual review cycle and board submission facilitation
3. Third-party vendor risk assessment and TPVR register maintenance

Deliverables:

1. OJK Compliance Evidence Pack
2. Policy Register (updated annually)
3. Third-Party Risk Report