Andhanu Ismail

Background

About Andhanu Ismail

As an IT Governance, Risk & Compliance (GRC) Specialist with a strong foundation in information security governance, audit coordination, and data analytics, I bring over 7 years of experience driving technology assurance and regulatory compliance in the multifinance and technology sectors. I have led and supported multiple ISO/IEC 27001:2022 certification projects for enterprise environments, ensuring zero nonconformities, and acted as the primary liaison during PwC and internal audits, strengthening organizational readiness and control assurance. My work spans the development of IT risk frameworks, data privacy programs, and cyber maturity assessments aligned with ISO ISO 27005, POJK 4/2021, and UU 27/2022. Previously, I contributed to IT governance and compliance initiatives for regional banks at Veda Praxis, helping institutions like Bank Jatim and Bank Maspion align their IT and cybersecurity frameworks with COBIT 2019, SEOJK, and ISO 27001 standards. With a background in business analytics and system implementation, I combine a data-driven mindset with compliance expertise—bridging technical understanding and governance strategy to enable secure, efficient, and accountable operations.