Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 6 hours ago

Principal ITGRC Program Manager (SDE 4)

Kredivo Group72 open roles

Where
Jakarta, Indonesia
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowPrincipal ITGRC Program Manager (SDE 4)Kredivo Group · Jakarta, Indonesia

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Kredivo Group's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. Kredivo Group postings stay open a median of 14 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.7%14 days
  5. 35.6%30 days
  6. 58.0%60 days
This job: posted 6 hours ago

Kredivo Group median: 14 days open

The posting

Kredivo Group runs financial services businesses across seven entities in Indonesia, Vietnam, Thailand and the Philippines. Each entity has an ITGRC lead who manages local compliance, regulators and audits. This role works across those leads and responsible to program manage IT compliance for the whole Group: one set of policies implemented properly everywhere, one audit issue board, the same core processes in every entity, and audit findings and investor requirements driven through to closure.

About the Job:

1. Group policies and their implementation Own the Group’s IT and information security policies and procedures. Keep them current and aligned with local regulatory requirements. Work with each entity’s ITGRC lead to make sure policies are implemented properly, not just adopted on paper. Check implementation regularly, for example through periodic reviews or evidence checks. Log gaps on the audit issue board and track them to closure with the entity lead.

2. Audit issue board Own the Group’s audit issue board. It covers findings from all audit types: financial audits, regulatory audits, ISO 27001 audits and partner security reviews. Drive every issue to closure across all entities, with Indonesia as the priority. Agree owners and due dates with entity leads, chase progress, and escalate when issues slip. Report open and overdue issues to leadership regularly, by entity and by audit type.

3. IT audits within financial audits Manage the IT audit workstream (ITGC) of the annual financial audits in Indonesia (Deloitte), Vietnam, Thailand and the Philippines. Plan with external auditors, entity ITGRC leads and internal stakeholders, coordinate evidence from IT and Engineering, and keep to timelines.

4. GRC platform and compliance processes Own the Group’s GRC platform, which we may build in-house or use off the shelf. Act as its product owner: define requirements, prioritise features, and drive adoption with entity leads. Make sure core processes run the same way in every entity: vendor security assessments, access reviews, and security awareness.

5. Investor requirements Track and manage information security requirements from investors such as Mizuho. Prepare responses and evidence with entity leads, and make sure commitments made to investors are delivered.

About you:

  • 7–10 years in IT audit, IT GRC or IT compliance. Big 4 experience is a strong plus.
  • Hands-on experience with ITGC audits as part of financial statement audits.
  • Exposure to regulatory audits, ISO 27001 audits or third-party security reviews.
  • Working knowledge of ISO 27001 and common control frameworks (e.g. NIST CSF, COBIT).
  • Experience running an audit issue tracker or GRC tool across multiple teams or entities.
  • Excellent written and spoken English.
  • Strong stakeholder management with peers and senior leadership. You can get policies implemented and findings closed through people you don’t manage.
  • Comfortable having difficult conversations under pressure, such as pushing back on overdue findings, escalating risk to senior leaders, or handling auditor and investor scrutiny.
  • Comfort working across countries and time zones.

Nice to have:

  • CISA, CRISC or CISSP
  • Experience with Southeast Asian financial regulators (e.g. OJK, BI).
  • Experience defining requirements for an internal tool or working with a GRC platform such as OneTrust.
  • Experience handling investor or bank due diligence on security. #LI-RR1
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Kredivo Group's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Kredivo Group's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Kredivo Group's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.