Ressty Yuniarti

Background

About Ressty Yuniarti

Highly experienced and passionate IT Audit, IT Governance Risk Compliance and Security Auditor professional with 14 years experience, over 9 years of experience in the banking industry as an IT Audit Manager and nearly 5 years as Information Security and Data Privacy Protection Lead in the transportation company and payment industry. Holds a international certificate such as CISA (Certified Information System Auditor), COBIT 2019 Foundation Certified, CDPO (Certified Data Protection Officer), CPSCM (Certified Payment Security Compliance Manager), CEH (Certified Ethical Hacker) and National certification such as CITPE (Certified IT Procurement Experts), BSMR/BARA (Sertifikasi Manajemen Risiko Bank). Adept in utilizing data analytics tools such as CaseWare IDEA for risk-based auditing and compliance reviews. Holds a Bachelor’s degree in Informatics Engineering from Institut Teknologi Sepuluh Nopember (ITS) Surabaya, a top-tier technical university in Indonesia. Proven expertise in IT governance, risk, and compliance (GRC), with deep understanding of international standards and frameworks such as COBIT, COSO, ISO/IEC 27001 & 27701, NIST SP 800-53, PCI DSS, PCI PIN, and Indonesia's Personal Data Protection Law (UU PDP). Recognized as a collaborative team leader, fostering a motivated and high-performance work environment. Specialities in Auditing of Information Technology, IT GRC, Information Security, Data Privacy and Protection, Information Assurance, Business Process, Business Strategy and Consulting. Key Skills & Competencies IT Audit & Assurance (Certified CISA, Risk-based Audit, ITGC, ITAC, Application Control) GRC Frameworks (Certified COBIT 2019, COSO ERM, ISO 27001 & 27701, PCI DSS 4, PCI PIN 3.1) Information Security & Data Protection (Certified CEH, ISO 27001 & 27701, PCI DSS 4, PCI PIN 3.1, UU PDP) Data Analytics using IDEA Software Data Privacy Impact Assessment (DPIA) and Record of Privacy Activities (ROPA) Business Process & Risk Assessment Team Leadership & People Management IT Compliance & Internal Control Evaluation Security Awareness & Policy Development IT Project Assurance & Business Continuity Management Open to new opportunities where I can leverage my skills to contribute to organizational resilience and security posture.