job description
Are you a seasoned professional passionate about IT governance, compliance, and competency development? Our client, a forward-thinking organization, is seeking a Senior Competency & Compliance Officer to lead and enhance their IT frameworks in Bali, Indonesia.
In this pivotal role, you will drive the alignment of IT practices with industry standards, regulatory requirements, and organizational goals. You will collaborate with cross-functional teams to ensure robust compliance, risk management, and continuous improvement in IT competencies. This is a unique opportunity to shape the future of IT excellence in a dynamic and growing environment.
Join us and contribute to building a culture of accountability, innovation, and operational resilience.
Responsibility
- Develop, implement, and maintain IT governance frameworks aligned with industry best practices (e.g., COBIT, ISO 27001, ITIL).
- Lead compliance audits and assessments to ensure adherence to internal policies and external regulations.
- Design and execute competency development programs for IT teams, including training, certifications, and skill gap analyses.
- Monitor and report on IT risk management activities, identifying vulnerabilities and recommending mitigations.
- Collaborate with stakeholders to integrate compliance requirements into IT projects and operations.
- Oversee the documentation and maintenance of IT policies, procedures, and controls.
- Conduct regular reviews of IT processes to ensure efficiency, security, and alignment with business objectives.
- Serve as the primary liaison for regulatory inquiries and third-party audits related to IT compliance.
Qualifications
- Bachelor’s degree in Information Technology, Computer Science, Business Administration, or a related field. Master’s degree or certifications (e.g., CISA, CISM, CISSP, PMP) are a plus.
- Minimum 5 years of experience in IT governance, compliance, or risk management, with at least 2 years in a senior role.
- Proven expertise in IT frameworks such as COBIT, ISO 27001, NIST, or ITIL.
- Strong understanding of regulatory requirements (e.g., GDPR, PDPA, or industry-specific standards).
- Excellent analytical, problem-solving, and communication skills to engage with technical and non-technical stakeholders.
- Experience in conducting audits, risk assessments, and compliance reporting.
- Ability to develop and deliver training programs and competency frameworks for IT teams.
- Fluency in English; proficiency in Indonesian is an advantage.