IT Auditor

About The Role:

To plan, perform, and report IT audits that evaluate the effectiveness of internal IT controls, identify risks, and ensure compliance with internal policies and external regulations. This includes coordinating with internal and external stakeholders to enhance IT security and minimize risks while improving overall operational efficiency.

What Will You Do:

• Develop IT audit programs, create audit checklists, and perform IT audits on various IT systems and platforms.
• Execute efficient and effective IT audit procedures, ensuring compliance with audit standards and methodologies.
• Establish IT audit plans based on identified risks, ensuring that high-risk areas are regularly reviewed.
• Review, evaluate, and test IT controls to determine the exposure to risks and provide strategies for improvement.
• Provide recommendations and guidelines on identified IT security risks and control weaknesses.
• Prepare and coordinate audit review reports and test results for internal and external stakeholders.
• Follow up on audit findings (internal and external) to ensure timely implementation of corrective actions.
• Monitor the execution of remediation plans based on audit findings to ensure compliance and improvement.
• Assist in managing internal and external audits and support the IT Compliance and IT Security teams in improving processes.
• Ensure compliance with regulations such as PCI DSS v4.0, ISO 27001:2022, and Bank Indonesia standards.

Minimum Qualifications: What We Are Looking For:

• Bachelors degree in Information Technology, Computer Information Systems, or a related field
• Minimum 3 years of experience as an internal or external IT auditor
• One or more professional certifications such as Lead Auditor, CISA (Certified Information Systems Auditor), CIRSC, CEH (Certified Ethical Hacker), or CISSP (Certified Information Systems Security Professional)
• Proficient in IT audit methodologies, risk-based auditing, and internal control frameworks
• Strong knowledge of PCI DSS v4.0, ISO 27001:2022, and Bank Indonesia regulations
• Experience in auditing network security, IT infrastructure, and various IT platforms, operating systems, and applications
• Familiarity with IT Application Control Reviews, Data Analysis, and SDLC (Software Development Life Cycle) processes
• Strong understanding of IT risk management and cybersecurity
• Knowledge of IT audit tools and methodologies to assess control effectiveness
• Strong analytical and problem-solving skills
• Excellent communication skills, both written and verbal
• High initiative and the ability to work effectively in a team environment
• Strong attention to detail and the ability to work under pressure
• Ethical conduct and strong interpersonal skills
• Awareness of current cybersecurity trends and vulnerabilities
• Ability to translate technical requirements into actionable audit steps

The transaction is the lungs of the breathing economy, that is why our first step starts with a big dream to pave the way towards freedom of transaction. Since 2007, DOKU has been the first electronic payment system and risk management company in Indonesia. From paying and getting paid to transfer funds, all are possible with DOKU. For more than one decade, we have grown together alongside large and medium scaled companies to personal sellers from various lines of business, ranging from transportation, tourism, insurance, retail, donation, communities, and many more. Collaboration with partners such as local and international banks, also non-banking institutions has strengthened our reputation as a trusted local electronic payment solution. Our business grows together with our partners businesses. Thus we have built a payment ecosystem that is supportive and strengthens theirs. The formation of three product pillars that responds to all business needs across all layers of society has marked our transformation from “The Better Way to Pay” becoming “Think Beyond Payments”. The three winning product pillars comprise Payment Gateway and Transfer Services for Corporate, SMEs, Start-ups, and Local and International MSMEs. The last product pillar, Collaborative Commerce, is designed to empower communities and personal usage.