Lead Internal Auditor - Business

About the Role

At GoTo, our business operates in a fast-paced and increasingly regulated environment, with complex processes and high-volume transactions across our ecosystem. As a Lead Internal Auditor, you will plan and execute risk-based audits, assess operational and regulatory risks, and evaluate the effectiveness of key controls across the business. Working closely with business, risk, compliance, and Group Audit stakeholders, you will identify control gaps, communicate audit findings, and provide practical recommendations to strengthen governance and risk management. This role offers broad exposure to GoTo’s technology-driven business and evolving regulatory landscape, while providing opportunities to deepen your audit expertise and analytical skills.

What You Will Do: Risk-Based Audit Planning: Plan and develop risk-based audit plans considering regulatory requirements, operational risks, business needs, and governance inputs (Enterprise Risk, Ethics, and Regulatory Compliance).

End-to-End Audit Execution: Independently plan and execute audit engagements in line with approved plans, internal audit methodologies, and quality standards.

Risk & Control Assessment: Perform in-depth analysis of operational processes, regulatory matters, and root causes to identify key risks and control gaps.

Audit Reporting & Recommendations: Prepare clear and comprehensive audit reports, provide guidance on remediation actions, and monitor progress through to closure.

Stakeholder & Issue Management: Engage with business stakeholders and Group Audit to discuss findings, escalate key issues, and align on remediation actions.

Remediation Monitoring: Track remediation progress, follow up on outstanding findings, and support timely closure of agreed actions.

Audit Communication: Effectively communicate audit observations, recommendations, remediation status, and report deliverables in both Bahasa Indonesia and English.

What You Will Need: Minimum of 6–8 years of audit experience, gained from public accounting firms and/or internal audit roles, preferably within financial services, fintech, banking, or other regulated industries, especially those in lending.

Hands-on experience auditing compliance with relevant Otoritas Jasa Keuangan (OJK) and/or Bank Indonesia (BI) regulations, preferably within financial services or lending-related businesses.

Good understanding of risk-based audit methodologies, including audit planning, walkthroughs, control testing, identifying findings, and developing audit recommendations.

Good understanding of payment systems, processes, and technology environments, with exposure to high-volume transaction processes preferred.

Professional certification in audit, risk, or information systems (e.g., CA, CPA, CIA, CISA, CRMA, or equivalent) is preferred.

Proficiency in data analysis tools such as MS Excel, ACL, Tableau, or equivalent, with strong analytical and problem-solving skills.

Strong communication and stakeholder management skills, with the ability to work independently, manage multiple audit assignments, and communicate effectively in both Bahasa Indonesia and English. Strong report writing skills in English to communicate concisely on audit findings and reports.