IT Security Specialist (Information Security)

Job Summary:

We are seeking a skilled and experienced IT Security Specialist to join our esteemed financial institution's Information Security team. The ideal candidate will have a proven track record of working in IT security and a deep understanding of financial industry regulations, particularly with experience dealing with the Financial Services Authority of Indonesia (OJK).

As the IT Security Specialist, you will play a critical role in safeguarding our organization's information assets and protecting against potential cyber threats. Your primary responsibility will be to implement and maintain robust security measures while ensuring compliance with OJK's regulations and industry standards. You will collaborate with various teams to identify vulnerabilities, respond to security incidents, and devise effective security strategies to maintain the integrity and confidentiality of our sensitive data.

Roles and Responsibilities:

1. OJK Compliance: Demonstrate expertise in OJK's regulations and guidelines related to information security. Implement and maintain security controls to ensure adherence to OJK's requirements and relevant financial industry standards.
2. Information Security Management: Develop, implement, and manage the information security program for the financial institution. This includes risk assessments, security policies, procedures, and guidelines.
3. Security Incident Response: Assist and participate in security incident response activities. Investigate and analyse security incidents to identify the root cause and implement corrective actions to prevent future occurrences.
4. Vulnerability Management: Conduct regular security assessments, vulnerability scans, and penetration tests to identify potential weaknesses in the IT infrastructure. Coordinate with IT teams to remediate vulnerabilities effectively.
5. Security Awareness Training: Design and conduct security awareness and training programs for employees, ensuring that security best practices are understood and followed across the organization.
6. Security Architecture: Collaborate with IT architects to design and implement secure infrastructure and network solutions that align with industry best practices and regulatory requirements.
7. Security Audits and Assessments: Facilitate internal and external security audits and assessments, providing necessary documentation and evidence of security controls' effectiveness.
8. Third-Party Risk Management: Evaluate the security posture of third-party vendors and service providers, ensuring they meet security and compliance standards.
9. Incident Documentation: Maintain comprehensive documentation of security incidents, reports, policies, and procedures.
10. Emerging Threat Analysis: Stay up-to-date with the latest cybersecurity trends, vulnerabilities, and emerging threats, and proactively recommend security enhancements.

Requirements:

1. Bachelor's degree in Computer Science, Information Security, or a related field.
2. Proven 5-6 years’ experience in IT security roles, with a focus on financial institutions and OJK compliance.
3. Strong knowledge of OJK regulations and relevant financial industry standards.
4. Professional certifications such as CISSP, CISM, or CISA are preferred.
5. In-depth understanding of security technologies, such as firewalls, intrusion detection/prevention systems, SIEM, etc.
6. Experience with vulnerability assessment tools, penetration testing, and risk assessment methodologies.
7. Strong analytical and problem-solving skills, with the ability to identify security risks and propose effective solutions.
8. Excellent communication and interpersonal skills to collaborate with cross-functional teams and management.
9. Ability to work under pressure and manage multiple tasks simultaneously.

Join our dynamic team and make a significant impact in safeguarding our financial institution's information assets. If you possess the required skills and experience, we welcome your application.

#LI-CT2