Governance, Risk & Compliance (GRC) Specialist

• Analyze and understand existing operational processes, and translate them into structured governance documentation (Policy, SOP, WI, Forms & Records).
• Ensure implementation and compliance of ISO standards across departments.
• Coordinate and support internal and external audits, including: Evidence preparation, Documentation review, & Audit coordination with internal teams
• Identify process gaps and compliance issues, and propose practical improvement solutions.
• Maintain and update risk register, including risk identification, assessment, and mitigation tracking.
• Work closely with cross-functional teams (Facility, IT, SDT, Sales) to ensure process and compliance alignment.
• Monitor and follow up on audit findings, corrective actions, and continuous improvement initiatives.
• Ensure proper document control practices (versioning, approval flow, storage, and accessibility).
• Translate ISO requirements into operational practices that can be implemented by internal teams.
• Support development and maintenance of GRC documentation structure (Source of Truth).
• Handling ISO Audits

- ISO 14001 – Environmental Management System

- ISO 45001 – Occupational Health & Safety Management

- ISO 9001 – Quality Management System

- ISO 27001 – Information Security Management

- ISO 22301 – Business Continuity Management

• Handling Other Audits:

- PCI-DSS (standar keamanan data pembayaran)

- SOC-2 (System and Organization Controls)

- TCOS (Technical Compliance On Site)

• Perform Internal Audit if needed

• Strong process analysis and improvement skills, with ability to map workflows and identify gaps.
• At least having solid knowledge of ISO 27001 and/or ISO 9001, including practical implementation and interpretation.
• Experience in audit and compliance processes (internal/external audits, documentation, and follow-ups).
• Good risk management capability, including risk identification, assessment, and mitigation planning.
• Familiarity with governance documentation (policies, SOPs, work instructions, and records).
• Strong analytical, critical thinking, and detail-oriented mindset with a structured approach to work.
• Effective communication and coordination skills, with high ownership, professionalism, and ability to work independently under pressure (English proficiency required).

• Competitive salary package and allowances
• Annual performance bonus
• Health insurance coverage (BPJS Kesehatan & BPJS Ketenagakerjaan) and Private Insurance
• Annual leave entitlement in accordance with company policy
• THR (Religious Holiday Allowance)
• Training and professional development opportunities
• Career growth and internal mobility opportunities
• Supportive and collaborative work environment