Total 4 job vacancies by Amartha

About the role: 

As an IT Audit Lead, you will get a chance to help Amartha on implementing IT Internal Audit activities and demonstrate your keen ability to identify the root cause of the problem. You will work alongside the other internal audit team, risk division, and monitor Amartha’s operational activities to deliver  improvement of business process quality of Amartha. 

Responsibilities: 

• Ensure IT Internal Audit plan is executed properly and sufficient audit evidence and/or documentation is  obtained to support audit findings. 
• Collect and analyze data to detect anomaly transactions, deficient controls, duplicated effort,  extravagance, fraud, or non-compliance with laws, regulations, and management policies.
• Implement systems and procedures related to the IT audit process
• Demonstrate the ability to identify the root cause of audit process. 
• Prepare audit working papers in complete, systematic, and timely manner and ensure those are  documented in accordance with professional standards. 
• Prepare a detailed IT audit report. 
• Providing insightful recommendations to minimize or eliminate risks to shareholders.
• Monitor open issues and ensure implementations of recommended internal control measures.
• Conduct advisory services process improvement to the business cluster and produce its report.
• Maintain good relations with the Auditee and third counterparts during the implementation of internal  audit assignment.

• A degree in Technology or Business, such as Information Technology, Information Systems, or Computer Science, from a reputable university.
• Over 6 years of experience in auditing IT controls, including General IT Controls, Application Controls, and Security Controls in similar industries.
• Experience with Internal Control over Information Security Management (ISMS), including ISO 27001 reviews, Cyber Security, and IT regulatory compliance.
• Strong technical knowledge in IT and Information Security reviews, with relevant certifications (CISA, CRISC, ISO27001 lead auditor/implementor) as a plus.
• Familiarity with IT governance and risk frameworks like COBIT, ITIL, TOGAF, and ISO 31000.
• Knowledge of internal auditing, risk management, and business continuity.
• Ability to handle multiple projects, take initiative, and be proactive.
• High integrity, quick learner, agile, honest, team-oriented, detail-focused.
• Strong analytical, problem-solving, and root cause analysis skills.
• Good project management experience in system development.
• Excellent written and verbal communication skills

Amartha is a dynamic and innovative technology company dedicated to empowering grassroots communities through inclusive digital financial services. Beyond that, we are committed to shaping the future of digital talent in Indonesia.

This year, we are proud to introduce the A-Game Engineering Series, an intensive three-month program designed for individuals passionate about software development and programming.

Participants in the A-Game Engineering Series will gain hands-on experience working on high-impact projects, enhance their skills through tailored mentoring and learning programs, and gain valuable exposure to thriving technology companies.

Take the leap—join the A-Game Engineering Series today! Create a brighter future for tomorrow!

• Final-year student or Bachelor’s degree holder in STEM majors.
• Passionate about pursuing a career in software development and programming.
• Have a basic knowledge of coding and fundamental computer science.
• Ready to commit to a 3-month program (February - May) to participate offline at Amartha Village in the bootcamp and project.

• Get a monthly allowance.
• Learn from top tech leaders.
• Work on impactful projects.
• Grow with professional development.
• Enjoy fun events and activities.
• Make a difference for communities.
• Chance for a full-time job after the program!

Amartha is seeking a highly skilled and proactive Senior Talent Acquisition to join our dynamic People and Culture team. This pivotal role focuses on identifying, attracting, and hiring top talent with technical and specialized skills to address both current and future hiring needs. The Senior Talent Acquisition will collaborate closely with department heads, build and maintain robust candidate pipelines, and ensure a strong employer brand is upheld throughout the recruitment process.

Responsibilities:

• Collaborate with hiring managers to understand job requirements and align recruitment strategies.
• Create and maintain a talent pipeline for future hiring needs, ensuring a proactive recruitment approach.
• Develop and implement sourcing strategies to attract top talent through social media, professional networks, and other channels.
• Build and maintain strong relationships with potential candidates, ensuring a positive candidate experience.
• Maintain a database of current and future candidates to support staffing needs.
• Act as a brand ambassador, ensuring the company’s image is positively represented throughout the hiring process.
• Analyze recruitment metrics and suggest improvements to enhance hiring efficiency.

• Minimum Bachelor’s degree in any field.
• At least 7 years of experience as a technical sourcer, recruitment agent, consultant, or a similar role.
• Proficiency in Google Workspace and Applicant Tracking Systems (ATS) or similar database systems.
• Proven expertise in recruiting for technology teams e.g Engineer, PM, Data
• Strong understanding of the full-cycle recruitment process.
• Excellent verbal and written communication skills.
• Ability to work independently with minimal supervision.
• Demonstrated leadership skills and the ability to mentor and guide junior team members.

About the Role

The Associate Software Security Engineer plays an essential role in protecting Amartha from evolving cyber threats. You will be part of our dynamic security team, focusing on identifying and mitigating security risks across our technology stack.

About the Team

Our Information Security team consists of dedicated security professionals who prioritize security and privacy by design. We work closely with development teams to enable secure product development while maintaining operational efficiency.

Primary Responsibilities

- Execute vulnerability assessments and penetration tests across web applications, APIs, and mobile platforms

- Implement and maintain security controls in cloud environments (GCP, AWS)

- Develop automation scripts and tools to enhance security processes

- Perform security code reviews and threat modeling

- Support our bug bounty program through triage and validation

- Monitor systems for security anomalies and investigate potential incidents

- Collaborate with development teams to remediate security findings

Growth & Development

- Mentorship from experienced security engineers

- Certification and training support

- Hands-on experience with modern security tools and challenges

- Clear career advancement path within the security team

Required Skills

- 2+ years of hands-on security testing or software development experience

- Strong understanding of web security fundamentals and OWASP Top 10

- Proficiency in at least one scripting/programming language (Python, Bash, or Go)

- Experience with security testing tools (Burp Suite, OWASP ZAP)

- Basic understanding of cloud security concepts

- Ability to clearly communicate technical findings to various stakeholders

- Fast learner with passion for cybersecurity

- Self-motivated to stay updated with security trends and threats

Preferred Qualifications

- Security certifications (eJPT, OSCP, CEH)

- Experience with cloud platforms (AWS, GCP)

- Knowledge of CI/CD pipelines and DevSecOps practices

- Mobile application security testing experience

- Familiarity with infrastructure as code (Terraform, Ansible)

Technical Environment

- Security Tools: Burp Suite, Metasploit, Nmap, MobSF, Frida

- Development Tools: Git, GitHub, Jenkins

- Cloud Platforms: AWS, GCP

- Programming Languages: Python, Bash, Go