PitchMeAI Jobs
Xendit

IT GRC Analyst

Xendit · Jakarta, Indonesia

Posted about 3 months ago

or apply directly on Xendit's site. We never take the application ourselves.

Is this posting real?

This role has been open
81 days
Xendit's roles stay open a median of 81 days
Reposted
No
Salary listed
No
4% of Xendit's roles list one
Ghost-job risk at Xendit
high
25 stale, 0 reposted of 25 open
Hiring momentum
32 roles opened in the last 90 days
↑ up vs. the prior 90 days
Last confirmed on the employer's board
2026-10-23

Measured from postings appearing on and disappearing from Xendit's own greenhouse board since 2026-08-03. Full hiring picture for Xendit.

About this role

The IT GRC Analyst at Xendit will focus on ensuring that the company's IT systems and processes comply with regulatory obligations and certification standards across multiple markets. This role involves managing the lifecycle of IT certifications like PCI-DSS and ISO 27001, conducting IT risk assessments, and collaborating with various teams to integrate compliance into operations. The analyst will also serve as the primary contact for regulatory bodies and coordinate audits and examinations.

Our read on this posting2.2out of 5
benefits
1/5
freshness
1/5
career value
4/5
role clarity
5/5
pay transparency
0/5

Scored from the posting itself — how clearly the role is described, how much it says about pay and benefits, and how recently it was listed. Not a judgement of Xendit as an employer.

What you need

  • 3–5 years of hands-on experience in IT GRC, IT Risk Management, or IT Compliance roles
  • Solid working knowledge of PCI-DSS, ISO 27001 frameworks, including implementation, certification, and audit readiness
  • Familiarity with Bank Indonesia (BI) and OJK IT governance regulations applicable to payment service providers in Indonesia
  • Proven experience conducting IT risk assessments, control testing, and gap analyses
  • Demonstrated ability to develop, review, and maintain IT policies, standards, and procedures
  • Strong analytical skills with the ability to translate diverse regulatory requirements into technical and operational controls

Nice to have

  • Prior experience navigating Bank Indonesia's PJP (Penyelenggara Jasa Pembayaran) Category 1 or Category 2 licensing requirements
  • Hands-on experience managing end-to-end certification processes for ISO 27001, PCI-DSS, or SOC 2
  • Direct experience coordinating IT audits or regulatory examinations with regional bodies such as BSP, BOT, MAS, BNM
  • Relevant professional certifications such as CISA, CRISC, ISO 27001 Lead Implementer, or ISO 27001 Lead Auditor
  • Prior experience in fintech, digital payments, or financial services in a multi-market Southeast Asian or global context

Worth weighing

  • The role involves managing compliance across multiple jurisdictions, which may add complexity to the responsibilities.
  • No salary or benefits information is provided in the posting.
  • The position requires effective communication across different countries and time zones, which may require flexibility in working hours.

Summarised from Xendit's posting. Read the full original.

Listed by Xendit on their greenhouse job board, last confirmed open on 2026-10-23. PitchMeAI is not the employer.

More roles at Xendit

All 25 open roles at Xendit →