job description
Join the PJ Lhuillier Group of Companies as an IT Controls and Compliance Analyst and play a pivotal role in safeguarding our digital infrastructure. In this dynamic position, you will ensure that our IT systems and processes adhere to industry-leading security and compliance standards, mitigating risks and enhancing operational integrity. Based in the vibrant regions of Bali, this role offers a unique opportunity to blend professional excellence with a world-class lifestyle.
As a key member of our IT Governance team, you will collaborate with cross-functional stakeholders to implement robust controls, conduct audits, and drive continuous improvement in our compliance framework. Your expertise will directly contribute to maintaining the trust of our clients and partners while aligning with global best practices in cybersecurity and regulatory compliance.
If you are a detail-oriented professional with a passion for IT security and compliance, we invite you to apply and become part of a forward-thinking organization committed to innovation and excellence.
Responsibility
- Develop, implement, and monitor IT controls to ensure compliance with company policies, industry standards (e.g., ISO 27001, NIST), and regulatory requirements.
- Conduct regular IT audits and risk assessments to identify vulnerabilities and recommend corrective actions.
- Collaborate with IT and business teams to ensure security protocols are integrated into system development and operational processes.
- Maintain documentation of IT policies, procedures, and compliance evidence for internal and external audits.
- Monitor and report on compliance metrics, providing insights to senior management on IT risk exposure.
- Lead training sessions to educate employees on IT security best practices and compliance obligations.
- Investigate and resolve compliance incidents, ensuring timely remediation and prevention of recurrence.
- Stay updated on emerging threats, regulatory changes, and industry trends to proactively enhance the compliance framework.
Qualifications
- Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.
- Minimum of 3 years of experience in IT compliance, risk management, or IT audit roles.
- Certifications such as CISA, CISSP, CISM, or ISO 27001 Lead Auditor are highly advantageous.
- Strong understanding of IT governance frameworks (e.g., COBIT, ITIL) and regulatory requirements (e.g., GDPR, PDPA).
- Proven ability to analyze complex IT systems and identify compliance gaps.
- Excellent communication skills, with the ability to present technical concepts to non-technical stakeholders.
- Detail-oriented with strong analytical and problem-solving skills.
- Experience working in a multicultural or international environment is a plus.