job description
Join Coforge as an Internal Auditor specializing in ISMS, BCMS, ITAC, and ITGC and play a pivotal role in ensuring the integrity, security, and compliance of our information systems and business continuity frameworks. This is a unique opportunity to work in a dynamic environment across Bali, contributing to the robustness of our global operations while enjoying the vibrant culture and lifestyle of Indonesia's most sought-after destinations.
As part of our team, you will conduct comprehensive audits, assess risks, and implement controls to safeguard our digital and operational assets. Your expertise in ISO 27001, CISSP, or CISA will be instrumental in driving continuous improvement and maintaining the highest standards of governance and security.
We offer a competitive salary, professional growth opportunities, and the chance to work in a collaborative, innovative environment. If you are a detail-oriented professional with a passion for audit and compliance, we invite you to apply and take the next step in your career with Coforge.
Responsibility
- Conduct internal audits of Information Security Management Systems (ISMS) and Business Continuity Management Systems (BCMS) to ensure compliance with ISO 27001 and other relevant standards.
- Evaluate the effectiveness of IT Application Controls (ITAC) and IT General Controls (ITGC) to mitigate risks and enhance operational efficiency.
- Develop and implement audit plans, including risk assessments, control testing, and reporting of findings to senior management.
- Collaborate with cross-functional teams to address audit findings and recommend corrective actions to strengthen internal controls.
- Monitor and report on the remediation of identified gaps to ensure timely resolution and compliance with regulatory requirements.
- Stay updated with emerging trends, threats, and best practices in information security, business continuity, and IT governance.
- Provide training and guidance to staff on audit processes, compliance requirements, and best practices in ISMS and BCMS.
- Support external audits and regulatory inspections by providing documentation, evidence, and clarifications as needed.
Qualifications
- Bachelor’s degree in Information Technology, Accounting, Finance, or a related field. A master’s degree or professional certification (e.g., CISSP, CISA, ISO 27001 Lead Auditor) is highly preferred.
- Minimum of 3-5 years of experience in internal auditing, with a focus on ISMS, BCMS, ITAC, or ITGC.
- In-depth knowledge of ISO 27001, COBIT, NIST, and other relevant frameworks for information security and business continuity.
- Strong analytical skills with the ability to assess complex systems, identify risks, and propose practical solutions.
- Excellent communication and interpersonal skills, with the ability to present findings and recommendations clearly to stakeholders at all levels.
- Experience with audit management software and tools (e.g., ACL, TeamMate, or similar) is a plus.
- Ability to work independently and collaboratively in a fast-paced, multicultural environment.
- Willingness to travel occasionally to other offices or client sites as required.