IT Governance & Cybersecurity Sr. Specialist

Job Descriptions:

• Develop and implement cybersecurity strategies, IT risk management, and governance controls aligned with business objectives.
• Oversee SOC operations, threat monitoring, incident response, forensic investigations, and recovery activities.
• Lead IT risk assessments, security reviews, Vulnerability Assessments (VA), penetration testing, and remediation plans.
• Maintain ISMS and ensure compliance with ISO 27001, OJK regulations, and other applicable security frameworks.
• Coordinate IT security audits, access control reviews, security awareness programs, and security controls across IT infrastructure and architecture.
• Coordinate Disaster Recovery (DR) planning and exercises, ensuring compliance with agreed RTO/RPO and supporting business continuity.

Requirements:

• Bachelor's Degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field.
• Minimum 5 years of experience in IT Governance, Cybersecurity, IT Risk Management, or Information Security.
• Strong knowledge of IT governance, cybersecurity frameworks, ISMS, ISO 27001, and IT risk management.
• Experience in SOC operations, vulnerability assessment, penetration testing, incident response, and security remediation.
• Familiarity with OJK regulations, IT audits, access controls, Disaster Recovery, and Business Continuity; experience in the insurance or financial services industry is preferred.
• Relevant certifications such as CISSP, CISM, CISA, CEH, or ISO 27001 are a plus, along with strong analytical, communication, and stakeholder management skills.