Role Description This full-time, on-site IT Security Officer role is based in South Jakarta. The IT Security Officer is responsible for monitoring, maintaining, and improving the organization's information security posture, including safeguarding systems, networks, and data from internal and external threats. Daily activities include conducting security assessments and audits, reviewing logs and alerts, managing security tools, and responding to incidents and vulnerabilities in coordination with relevant teams. The role involves defining and enforcing security policies and procedures, supporting secure software development practices, and collaborating with IT and business stakeholders to ensure compliance with regulatory and internal standards. The IT Security Officer also provides security awareness guidance, prepares documentation and reports on security status, and recommends enhancements to security architecture and controls.
Qualifications
- Strong foundation in Information Technology, including operating systems, networks, and infrastructure management.
- Applied experience in Cybersecurity, such as threat analysis, incident response, vulnerability management, and security frameworks.
- Knowledge of secure Software Development practices and lifecycle, with the ability to work effectively with engineering teams.
- Proficiency in Programming concepts sufficient to review code for security issues and understand common vulnerabilities.
- Understanding of Databases, including secure configuration, access control, and data protection techniques.
- Familiarity with security standards and regulations (e.g., ISO 27001, NIST, PCI-DSS or similar) and risk management principles.
- Strong analytical, problem-solving, and documentation skills, with attention to detail and accuracy.
- Effective communication skills, including the ability to explain technical security topics clearly to non-technical stakeholders.
- Ability to work on-site in South Jakarta, collaborate in cross-functional teams, and manage multiple priorities.
- Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or a related field; relevant certifications (e.g., CISSP, CISM, CEH, CompTIA Security+) are an advantage.
