IT Security Risk & Governance Specialist - Cybersecurity GRC Expert

Join Bussan Auto Finance as an IT Security Risk & Governance Specialist and play a pivotal role in safeguarding our digital infrastructure while ensuring compliance with industry standards and regulations. In this dynamic position, you will lead the planning, development, and implementation of our cybersecurity governance, risk, and compliance (GRC) framework. Based in Jakarta Raya, you will work closely with our IT team to identify and mitigate security risks, ensuring our systems are protected against evolving cyber threats. This is an exciting opportunity to be part of a growing company and contribute to our ongoing efforts to maintain a secure and compliant digital environment.

At Bussan Auto Finance, we are committed to innovation and excellence. As an IT Security Risk & Governance Specialist, you will have the chance to work with cutting-edge tools and technologies such as Splunk, Tenable, and Qualys. You will be responsible for conducting regular security assessments, vulnerability scans, and penetration testing to identify and remediate potential security weaknesses. Your expertise will be crucial in helping us achieve and maintain ISO 27001, SOC 2, and other relevant certifications.

📋 Tanggung Jawab Pekerjaan

• Lead the development and implementation of the cybersecurity GRC framework, ensuring alignment with industry best practices and regulatory requirements.
• Conduct regular security assessments, vulnerability scans, and penetration testing to identify and remediate potential security weaknesses.
• Monitor and analyze security incidents, implementing appropriate response and mitigation strategies.
• Develop and maintain security policies, procedures, and guidelines to ensure compliance with industry standards and regulations.
• Provide security awareness training to employees, fostering a culture of security consciousness.
• Collaborate with the IT team to integrate security measures into new and existing systems and processes.
• Stay updated with the latest cybersecurity trends, threats, and technologies, and apply this knowledge to enhance our security posture.
• Report on security metrics and KPIs to senior management, demonstrating the effectiveness of our security programs.

🎓 Kualifikasi & Syarat

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• 5+ years of experience in IT security, with a focus on GRC frameworks.
• Certifications such as CISSP, CISM, or CRISC are highly desirable.
• Proficient in using security tools and technologies such as Splunk, Tenable, and Qualys.
• Strong understanding of industry standards and regulations, including ISO 27001, SOC 2, and PCI DSS.
• Excellent communication and interpersonal skills, with the ability to work effectively with cross-functional teams.
• Ability to manage multiple projects and prioritize tasks in a fast-paced environment.
• Strong problem-solving and analytical skills, with the ability to think critically and make sound security decisions.

🛠️ Keahlian

Lowongan Terkait