SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Mekari, Indonesia's leading SaaS company serving 3M+ users, is seeking an experienced IT Auditor Lead to strengthen its internal audit function. You will own the quarterly IT internal audit plan and lead end-to-end audit engagements across planning, fieldwork, and reporting phases.
Key responsibilities include identifying and assessing IT-related risks (cybersecurity, data privacy, operational technology, emerging tech), evaluating IT control effectiveness across applications, infrastructure, cloud environments, and data governance, and conducting annual compliance audits for ISO 27001 and other relevant standards. You'll review system configurations, access controls, change management, and IT operations for control gaps, and drive implementation of audit recommendations across Engineering, Product, InfoSec, and IT Ops teams.
You will develop audit reports, issue logs, dashboards, and management updates on IT control health, provide early warning indicators on emerging IT risks and system vulnerabilities, and support IT governance and cybersecurity awareness initiatives.
Required: 3–6 years in IT Audit, IT Risk, Cybersecurity, or Technology Assurance. Strong understanding of IT general controls (ITGC), application controls, cloud environments, cybersecurity frameworks, and technology risk assessment. Familiarity with ISO 27001, SOC 2, NIST, COBIT, or similar frameworks. Technical foundation with SQL, JavaScript, and Python for data analysis or system review. Certifications such as CISA, CRISC, or ISO 27001 Lead Auditor/Implementer are a plus. Strong communication, coordination, interviewing, and issue-challenging skills when working with technical teams. Detail-oriented, analytical, and comfortable managing multiple concurrent audit activities.
