Chandra Wily Saputra, Cisa Email & Phone Number

Surabaya, Id

Indonesia

Jakarta, Indonesia

1. Directed Data Governance and Privacy initiatives, overseeing the development and implementation of policies, procedures, and controls to ensure sensitive information's protection, integrity, and confidentiality.2. Led efforts to establish and maintain compliance with data privacy regulations such as GDPR, CCPA, and other relevant standards, ensuring data handling practices aligned with legal requirements.3. Developed and maintained Data Governance frameworks, defining roles, responsibilities, and processes for data management and ensuring data quality and consistency across the organization.4. Collaborated with cross-functional teams, including Technology and Business units, to identify and mitigate data-related risks, conducting comprehensive assessments and implementing remediation measures as necessary.5. Provided expert guidance and support to business units on data governance best practices, fostering a culture of data stewardship and accountability.6. Conducted regular audits and assessments to monitor compliance with data governance policies and regulations, implementing corrective actions and continuous improvement initiatives as needed.7. Implemented robust data classification schemes and access controls to protect sensitive data assets and ensure appropriate handling and sharing of information, minimizing the risk of data breaches.8. Acted as the primary liaison with regulatory authorities and external stakeholders on data privacy matters, representing the organization's interests and ensuring compliance with regulatory requirements.9. Designed and delivered comprehensive training and awareness programs on data governance and privacy topics, equipping employees with the knowledge and skills to safeguard sensitive information and uphold data protection standards.

Jakarta, Indonesia

1. Manage and lead the Governance Team, ensuring seamless collaboration with the GRC team, Technology, and Business Teams to align governance efforts across the organization.2. Evaluate new and existing systems, procedures, and technologies for compliance, security, and conformance. Provide strategic recommendations to enhance processes and ensure alignment with organizational goals.3. Implement security controls based on comprehensive risk assessments, ensuring compliance with regulatory requirements. Sustain and continuously improve the security program to protect organizational assets.4. Create and maintain policies, standards, procedures, and controls to drive IT process improvement, support corporate business processes, and expand capabilities. Strengthen the overall governance and security framework.5. Collaborate with various business units and engage with external parties to ensure the implementation of adequate, suitable, and effective controls across the organization.6. Oversee the Security Awareness Program, fostering a culture of security within the internal organization and several sister companies. Promote secure practices and educate stakeholders on security protocols.7. Ensure adherence to applicable external regulations, maintaining the organization’s compliance posture and mitigating regulatory risks.8. Demonstrate the business-added value of governance initiatives by integrating governance practices into internal business processes. Highlight the strategic benefits of robust governance to stakeholders.9. Actively participate in GRC and Security Programs and projects such as IT Service Management (ITSM), ISO 27001, PCI DSS, Data Governance, and Data Privacy. Support the alignment of business and IT objectives to drive cohesive and secure operations.

Jakarta, Jakarta, Indonesia

1. Provide strategic direction and leadership in the development and execution of IT GRC initiatives. Ensure alignment with the organization’s goals and regulatory landscapes.2. Identify, assess, and manage IT risks. Develop risk mitigation strategies and implement controls to safeguard the organization’s information assets.3. Ensure adherence to relevant regulations and standards such as ISO 27001, PCI DSS, GDPR, and other industry-specific requirements. Oversee the development and maintenance of compliance programs to mitigate regulatory risks.4. Design and implement comprehensive IT governance frameworks. Establish policies, procedures, and standards that promote effective IT management and operational efficiency.5. Lead internal and external IT audits, ensuring compliance with established standards and policies. Provide assurance to stakeholders on the effectiveness of IT controls and risk management practices.6. Develop and implement incident response plans. Coordinate with relevant teams to manage and resolve IT security incidents promptly, minimizing the impact on the organization.7. Lead the development of IT GRC training programs. Through effective training and communication, foster a culture of compliance and risk awareness across the organization.8. Collaborate with key stakeholders, including executive leadership, business units, and external partners, to ensure cohesive and effective GRC practices. Provide regular updates and reports on GRC initiatives and status.9. Monitor and evaluate the effectiveness of GRC programs. Drive continuous improvement initiatives to enhance the organization’s GRC capabilities and resilience.10. Oversee data privacy and information security programs. Ensure the protection of sensitive data and compliance with data privacy laws and regulations.

Greater Jakarta Area, Indonesia

1. Conducted thorough risk assessments to identify and evaluate IT risks. Assisted in developing risk mitigation strategies and implementing appropriate controls to protect information assets.2. Supported the development, implementation, and maintenance of compliance programs. Ensured adherence to relevant regulations and standards such as ISO 27001, PCI DSS, and GDPR.3. Assisted in the creation and maintenance of IT policies, procedures, and standards. Promoted best practices in IT management and operational efficiency.4. Supported internal and external IT audits by gathering required documentation and evidence. Ensured compliance with established standards and policies.5. Implemented and monitored security controls based on risk assessments. Ensured that security measures were compliant with regulatory requirements and industry standards.6. Participated in the development and execution of incident response plans. Assisted in managing and resolving IT security incidents to minimize their impact on the organization.7. Contributed to the development of IT GRC training programs. Helped foster a culture of compliance and risk awareness through effective training and communication.8. Worked closely with various stakeholders, including business units and external partners, to ensure effective GRC practices. Communicated regularly on GRC initiatives and compliance status.9. Assisted in monitoring and evaluating the effectiveness of GRC programs. Supported continuous improvement initiatives to enhance GRC capabilities and organizational resilience.10. Assisted in the implementation and management of data privacy and information security programs. Ensured the protection of sensitive data and compliance with data privacy laws and regulations.

Bandung Area, West Java, Indonesia

1. Lead initiatives to develop and enhance IT GRC frameworks, ensuring alignment with industry regulations and best practices. Conduct thorough assessments and implement effective controls to mitigate risks and maintain compliance with standards such as COBIT, ISO 27001, and ISO 20000.2. Collaborate with stakeholders to develop strategic IT plans and architectures aligned with business objectives. Leverage expertise in IT strategy and enterprise architecture to design scalable and resilient IT infrastructures that support organizational growth and innovation.3. Oversee the implementation of IT projects and certifications, guiding clients through the complexities of standards and best practices. Ensure adherence to frameworks such as TIA and TOGAF, facilitating successful certification and achieving operational excellence.

Bandung Area, West Java, Indonesia

1. Held various roles within project matrices, including Project Manager, Subject Matter Expert, and Team Member. My expertise lies in visualizing project schedules, reporting project issues, status, and potential risks to clients and supervisors, and proposing implementation approaches and issue resolutions objectively and logically.2. Lead project teams in various capacities, ensuring adherence to timelines, budgets, and quality standards. Utilize a combination of project management methodologies and technical expertise to drive successful project outcomes.3. Initiate and facilitate meetings between clients and consultant teams to accelerate decision-making and issue-solving processes. Maintain open communication channels with stakeholders to ensure alignment and mitigate project risks.4. Take proactive responsibility for project smoothness by identifying potential challenges early on and implementing mitigation strategies. Foster a culture of accountability and excellence within project teams.5. Collaborate effectively with other parties and business partners, fostering positive relationships and ensuring seamless coordination. Maintain clear and transparent communication channels to facilitate project progress and resolution of issues.6. Expertise in IT value, risk, performance, service, and information security management, leveraging frameworks such as ISO 38500, COBIT, and ISO 27000 series.7. Proficiency in data architecture, warehousing, business intelligence, quality management, and document/content management, guided by DAMA DMBOK principles.8. Experience in developing IT master plans, business continuity, disaster recovery, and enterprise architecture, guided by methodologies such as TOGAF and ISO standards.9. Skilled in conducting IT audits, governance assessments, security audits, and internal audits, ensuring compliance with standards such as COBIT, ITAF, and ISO 15504.

Bandung Area, West Java, Indonesia

1. Held various roles within project matrices, including Project Manager, Subject Matter Expert, and Team Member. My expertise lies in visualizing project schedules, reporting project issues, status, and potential risks to clients and supervisors, and proposing implementation approaches and issue resolutions objectively and logically.2. Lead project teams in various capacities, ensuring adherence to timelines, budgets, and quality standards. Utilize a combination of project management methodologies and technical expertise to drive successful project outcomes.3. Initiate and facilitate meetings between clients and consultant teams to accelerate decision-making and issue-solving processes. Maintain open communication channels with stakeholders to ensure alignment and mitigate project risks.4. Take proactive responsibility for project smoothness by identifying potential challenges early on and implementing mitigation strategies. Foster a culture of accountability and excellence within project teams.5. Collaborate effectively with other parties and business partners, fostering positive relationships and ensuring seamless coordination. Maintain clear and transparent communication channels to facilitate project progress and resolution of issues.6. Expertise in IT value, risk, performance, service, and information security management, leveraging frameworks such as ISO 38500, COBIT, and ISO 27000 series.7. Proficiency in data architecture, warehousing, business intelligence, quality management, and document/content management, guided by DAMA DMBOK principles.8. Experience in developing IT master plans, business continuity, disaster recovery, and enterprise architecture, guided by methodologies such as TOGAF and ISO standards.9. Skilled in conducting IT audits, governance assessments, security audits, and internal audits, ensuring compliance with standards such as COBIT, ITAF, and ISO 15504.

Bachelor'S Degree, Information Technology

Graduated with Honours/Cumlaude in the Information Technology Department

Master'S Of Management Technology, Management Of Information Technology

Graduated with Honours/Cumlaude in the Information Technology Management Department