Bank Sahabat Sampoerna is looking for an IT Security Operations Officer who will be responsible for the following:

Perform daily IT security monitoring activities using tools such as SIEM, WAF, EDR, and other security platforms.
Analyze alerts and logs to identify potential security incidents, anomalies, and suspicious activities.
Execute incident handling processes, including identification, triage, investigation, escalation, and resolution of security incidents.
Conduct coordination and follow-up activities with IT Infrastructure, Application, Vendor/SOC, and related teams to support system remediation and improvement initiatives.
Monitor and evaluate remediation activities to ensure corrective actions are implemented in accordance with established SLA requirements.
Ensure the effective implementation and operational performance of security tools and platforms, including SIEM, WAF, DLP, Antivirus/EDR, and others.
Collaborate with internal IT teams and external vendors to maintain the stability, security, and effectiveness of security operations.
Perform monitoring and assessment of system vulnerabilities to ensure remediation actions are completed within the agreed SLA timeline.
Support internal and external audit activities (OJK, Bank Indonesia, external auditors, etc.) by preparing the required data, evidence, and documentation.

For this position, we will need someone who:

Minimum 1 year of experience in IT Security or Cyber Security Operations.
Strong understanding of fundamental information security concepts, including network security, system security, SIEM, and related technologies.
Exposure to or hands-on experience with red team/penetration testing activities at the junior level, including vulnerability scanning, basic exploitation techniques, and automated security testing tools (preferred).
Familiarity with security solutions and technologies such as SIEM, WAF, EDR, Vulnerability Scanners, and similar platforms.
Good understanding of access management concepts, including access control, Multi-Factor Authentication (MFA), and privileged access management.
Ability to perform basic information security risk analysis and demonstrate strong risk awareness.
Strong analytical and reporting skills, with the ability to prepare clear, structured, and management-friendly reports.
Knowledge of security regulations, frameworks, and standards such as OJK regulations, Bank Indonesia regulations, ISO 27001, and NIST is an advantage.