IT Security Operations Officer

Bank Sahabat Sampoerna is looking for an IT Security Operations Officer who will be responsible for the following:

• Perform daily IT security monitoring activities using tools such as SIEM, WAF, EDR, and other security platforms.
• Analyze alerts and logs to identify potential security incidents, anomalies, and suspicious activities.
• Execute incident handling processes, including identification, triage, investigation, escalation, and resolution of security incidents.
• Conduct coordination and follow-up activities with IT Infrastructure, Application, Vendor/SOC, and related teams to support system remediation and improvement initiatives.
• Monitor and evaluate remediation activities to ensure corrective actions are implemented in accordance with established SLA requirements.
• Ensure the effective implementation and operational performance of security tools and platforms, including SIEM, WAF, DLP, Antivirus/EDR, and others.
• Collaborate with internal IT teams and external vendors to maintain the stability, security, and effectiveness of security operations.
• Perform monitoring and assessment of system vulnerabilities to ensure remediation actions are completed within the agreed SLA timeline.
• Support internal and external audit activities (OJK, Bank Indonesia, external auditors, etc.) by preparing the required data, evidence, and documentation.

For this position, we will need someone who:

• Minimum 1 year of experience in IT Security or Cyber Security Operations.
• Strong understanding of fundamental information security concepts, including network security, system security, SIEM, and related technologies.
• Exposure to or hands-on experience with red team/penetration testing activities at the junior level, including vulnerability scanning, basic exploitation techniques, and automated security testing tools (preferred).
• Familiarity with security solutions and technologies such as SIEM, WAF, EDR, Vulnerability Scanners, and similar platforms.
• Good understanding of access management concepts, including access control, Multi-Factor Authentication (MFA), and privileged access management.
• Ability to perform basic information security risk analysis and demonstrate strong risk awareness.
• Strong analytical and reporting skills, with the ability to prepare clear, structured, and management-friendly reports.
• Knowledge of security regulations, frameworks, and standards such as OJK regulations, Bank Indonesia regulations, ISO 27001, and NIST is an advantage.