IT GRC Analyst

Tentang posisi ini

Xendit is an enterprise payments platform powering complex financial operations across Southeast Asia and global markets. We provide a unified API layer combining payment processing, global payouts, localized FX, identity compliance, and fraud protection. As a trusted financial partner backed by top-tier global investors, Xendit processes high-throughput transaction flows for leading global platforms including Meta, Traveloka, ByteDance, Wise, and Grab, building resilient payment infrastructure to drive regional commerce forward.

About the Job

At Xendit, we are looking for a mid-level/senior-level IT GRC Analyst to sit at the intersection of technology, compliance, and risk — not just for Indonesia, but across all of Xendit's operating markets. As an individual contributor, you will be responsible for ensuring our IT systems, processes, and controls meet the regulatory obligations and certification standards of every jurisdiction we operate in. You will be our regional GRC go-to person, coordinating directly with regulatory bodies across the regions (Bank Indonesia / OJK, BSP, BOT, etc). Beyond regulatory compliance, you will own and drive the full lifecycle of our IT certifications such as PCI-DSS and ISO 27001. You will work closely with engineering, security, product, and legal teams to embed compliance into how we build and operate. This is a role for someone who is detail-oriented, thrives in multi-market complexity, and can translate a wide range of regulatory requirements into practical, actionable controls in a fast-moving fintech environment.

Minimum Qualifications

• 3–5 years of hands-on experience in IT GRC, IT Risk Management, or IT Compliance roles

• Solid working knowledge of PCI-DSS, ISO 27001 frameworks, including implementation, certification, and audit readiness

• Familiarity with Bank Indonesia (BI) and OJK IT governance regulations applicable to payment service providers in Indonesia

• Exposure to or willingness to take regulatory requirements in at least one other Southeast Asian or international market (e.g., BSP, BOT, MAS, BNM, or equivalent)