Lead Internal Auditor - IT - Digital Signature

Jakarta

FinTech - Corporate – - /

Permanent /

On-site

Apply for this job

About the Role

At GoTo, our technology ecosystem operates at immense scale and complexity, supporting critical platforms, systems, and data across the organization. As the Internal Audit Lead (IT), you will lead the end-to-end execution of risk-based IT audits, assessing technology processes, IT controls, cybersecurity, data management, and system environments. Working closely with technology, security, risk, and business stakeholders, you will identify control gaps and technology risks, evaluate compliance with relevant regulatory requirements, and translate audit findings into practical recommendations that strengthen technology governance, security, and resilience. This role offers broad exposure to complex technology environments and requires strong IT audit expertise, analytical thinking, and stakeholder management skills.

Our team, GoTo Internal Audit, is a growing group of dedicated auditors with deepening expertise in our respective areas. As part of GoTo’s Internal Audit function, we support the Board’s oversight role and provide guidance to Management on operational efficiency, risk management, and asset protection across Gojek, Tokopedia, and GoTo Financial.

Our goal is to be a trusted business partner by delivering high-quality audits that help improve operational excellence through stronger controls and governance practices, while offering valuable insights on the transparency of performance in relation to business objectives. As a publicly listed company, we also play a key role in safeguarding stakeholders’ interests, ensuring asset protection, and maintaining regulatory compliance.

* IT & Risk-Based Audit Execution: Plan and execute risk-based IT audits covering technology infrastructure, applications, cloud environments, IT operations, and technology governance.

* IT Controls Assessment: Assess IT general controls, application controls, access management, change management, incident management, and other key technology processes.

* Cybersecurity & Technology Risk: Evaluate cybersecurity, information security, vulnerability management, business continuity, disaster recovery, and other technology-related risks.