Lead the strategy, architecture, planning, implementation, operation, and continuous improvement of the Company's IT infrastructure and cybersecurity capabilities.
Ensure the availability, reliability, performance, scalability, and security of enterprise networks, servers, data centers, cloud platforms, endpoints, and other supporting infrastructure in accordance with agreed service levels.
Develop and execute IT infrastructure and security roadmaps, architecture standards, technology lifecycle plans, capacity plans, and technical policies aligned with business priorities and enterprise architecture.
Manage cybersecurity operations, including identity and privileged access management, security monitoring, endpoint protection, vulnerability and patch management, data protection, security incident response, and third-party security controls.
Establish and regularly test backup and IT disaster recovery capabilities, including recovery procedures, RTO/RPO achievement, and coordination with the Company's Business Continuity Management process.
Maintain accurate infrastructure asset inventory, configuration records, licenses, and technology lifecycle information, and ensure controlled implementation of infrastructure changes.
Identify and manage infrastructure and information security risks, and ensure timely remediation of audit findings, vulnerabilities, security incidents, and compliance gaps.
Ensure compliance with applicable regulations, information security standards, Telkom Group policies, and internal IT governance requirements.
Manage infrastructure and security projects, budgets, procurement, contracts, licenses, vendors, service levels, and operational performance reporting.
Define and monitor key performance indicators covering system availability, incident resolution, infrastructure capacity, disaster recovery readiness, vulnerability remediation, and security compliance.
Lead, coach, and develop the Infrastructure & Security team and collaborate with business, application, data, risk, internal audit, and other technology units to deliver secure and reliable IT services.
Requirements
Minimum Bachelor's Degree in Information Technology, Computer Science, Information Systems, Informatics Engineering, Computer Engineering, or other related fields.
Minimum 5–7 years of experience in IT Audit, Technology Risk, or other related fields.
CISA (Certified Information Systems Auditor) certification is required.
CISM, CRISC, CIA, or ISO 27001 Lead Auditor certification is preferred; other relevant professional certifications are considered an advantage.
Strong understanding of Governance, Risk, and Compliance (GRC) principles.
Strong technical competencies in IT Audit, IT General Controls (ITGC), IT Governance, Technology Risk Management, Cybersecurity, Application & Infrastructure Audit, Data Governance, Digital Transformation Risk, Emerging Technology Risk, and Data Analytics.
Strong leadership capabilities with analytical and critical thinking, project management, problem-solving, stakeholder management, communication, collaboration, attention to detail, continuous improvement, and decision-making skills.
