IT Security Manager  

Reporting to President Director and matrixed to the Group CISO, you will be accountable and responsible for overall direction and leadership for all technology risk, technology compliance, security architecture and design activities, including enterprise security standards, design patterns, best practices, reference architectures, emerging technology analysis and evaluation and adoption.

Role and responsibilities :

• Execute the cyber security strategy, roadmap and operational tasks, in alignment with the CISO Group function strategy and roadmap.
• Enforce security policies, standards and procedures; Drive updates as and when needed in collaboration with Group CISO function.
• Provide security requirements for new initiatives, for delivery of secure technology products. Perform necessary security assessments and manage remediation actions.
• Provide support to governance, risk and compliance matters for governance, risk and compliance assessments and recommends viable alternatives with regards to the area of IT and data hygiene. Work with DPO to ensure personal data protection is embedded in the application, services and products being developed.
• Lead the development and delivery of cyber security expertise
• Lead the development and maintenance of the security controls taxonomy, including periodic reviews to ensure its effectiveness and continuous improvement.
• Work with Indonesia & group IT team and Group CISO office to ensure IT and cyber security concerns are deal with promptly.
• Provide update to Management and internal staff on the best practices of the latest cyber security topics periodically. Security awareness activities to be conducted as appropriate in coordination with CISO Group Office
• Reviewing guidelines and circulars issued by authorities and establishing the necessary action plans.

• Bachelor Degree (S1) in Information Technology/Computer Science or equivalent from reputable university
• Min 7 years of Enterprise IT Security Experience across application, infrastructure
• Experience in developing, maintaining and implementing enterprise-wide cyber security strategies: security engineering, security education, network penetration testing, application vulnerability assessments, risk analysis and compliance testing
• Well-versed in IT security and risk management regulatory requirements, concepts, trends and technologies
• Familiar in Incident response, SIEM technologies, Vulnerability Management, Threat Intelligence, Compliance Management, Forensics, Vendor Management
• Knowledge of industry best practices on Secure Software Development Life Cycle (SSDLC)
• Certifications in one or more of the following CISSP, CISM, CISA, CRISC, GIAC certifications is highly preferred
• Possess good communication in both Bahasa Indonesia and English, writing and analytical skills