Lead Internal Auditor - Lending

Jakarta

FinTech - Corporate – - /

Permanent /

On-site

Apply for this job

About the Role

At GoTo, our business operates in a fast-paced and increasingly regulated environment, with complex processes and high-volume transactions across our ecosystem. As a Lead Internal Auditor, you will plan and execute risk-based audits, assess operational and regulatory risks, and evaluate the effectiveness of key controls across the business. Working closely with business, risk, compliance, and Group Audit stakeholders, you will identify control gaps, communicate audit findings, and provide practical recommendations to strengthen governance and risk management. This role offers broad exposure to GoTo’s technology-driven business and evolving regulatory landscape, while providing opportunities to deepen your audit expertise and analytical skills.

* Risk-Based Audit Planning: Plan and develop risk-based audit plans considering regulatory requirements, operational risks, business needs, and governance inputs (Enterprise Risk, Ethics, and Regulatory Compliance).

* End-to-End Audit Execution: Independently plan and execute audit engagements in line with approved plans, internal audit methodologies, and quality standards.

* Risk & Control Assessment: Perform in-depth analysis of operational processes, regulatory matters, and root causes to identify key risks and control gaps.

* Audit Reporting & Recommendations: Prepare clear and comprehensive audit reports, provide guidance on remediation actions, and monitor progress through to closure.

* Stakeholder & Issue Management: Engage with business stakeholders and Group Audit to discuss findings, escalate key issues, and align on remediation actions.

* Remediation Monitoring: Track remediation progress, follow up on outstanding findings, and support timely closure of agreed actions.

* Audit Communication: Effectively communicate audit observations, recommendations, remediation status, and report deliverables in both Bahasa Indonesia and English.

* Minimum of 6–8 years of audit experience, gained from public accounting firms and/or internal audit roles, preferably within financial services, fintech, banking, or other regulated industries, especially those in lending.

* Hands-on experience auditing compliance with relevant Otoritas Jasa Keuangan (OJK) and/or Bank Indonesia (BI) regulations, preferably within financial services or lending-related businesses.

* Good understanding of risk-based audit methodologies, including audit planning, walkthroughs, control testing, identifying findings, and developing audit recommendations.

* Good understanding of payment systems, processes, and technology environments, with exposure to high-volume transaction processes preferred.

* Professional certification in audit, risk, or information systems (e.g., CA, CPA, CIA, CISA, CRMA, or equivalent) is preferred.

* Proficiency in data analysis tools such as MS Excel, ACL, Tableau, or equivalent, with strong analytical and problem-solving skills.

* Strong communication and stakeholder management skills, with the ability to work independently, manage multiple audit assignments, and communicate effectively in both Bahasa Indonesia and English. Strong report writing skills in English to communicate concisely on audit findings and reports.

About the Team

Our team, GoTo Internal Audit, is a growing group of dedicated auditors with deepening expertise in our respective areas. As part of GoTo’s Internal Audit function, we support the Board’s oversight role and provide guidance to Management on operational efficiency, risk management, and asset protection across GoTo, Gojek, and GoTo Financial.

Our goal is to be a trusted business partner by delivering high-quality audits that help improve operational excellence through stronger controls and governance practices, while offering valuable insights on the transparency of performance in relation to business objectives. As a publicly listed company, we also play a key role in safeguarding stakeholders’ interests, ensuring asset protection, and maintaining regulatory compliance.