Senior Security Engineer (Governance, Risk, and Compliance)

Your main duties in flying with us:

• Responsible at managing and developing IT policies and procedures.
• Responsible at evaluating IT risks and developing security standards, procedures, and controls to manage risks.
• Responsible at performing IT risks on 3rd party and monitoring the process.
• Responsible at maintaining information security awareness in the organization and perform evaluate the information security awareness programs.
• Responsible at supporting audit activities and perform a regular internal security audit against our policies. Coordinates with internal business on technology compliance, audit and regulatory enquiries both internal and external.
• Responsible at managing and conduct assessment technology continuity to support business activities.
• Responsible at ensure user access alignment with current roles and responsibilities in the organization.
• Responsible at evaluating information security controls applied in the current technology assets.

Mandatory belongings that you must prepare:

• Bachelor’s degree in computer science or related field.
• Minimum experience 5 years in IT Governance and Risk.
• Fluent in bahasa and English.
• Have relevant experience in IT Governance framework such as COBIT 5, ITIL/ITSM, ISO 27001, PCI DSS, ITGC/ITAC.
• Have relevant experience in IT Security best practices such as OWASP Top 10, SANS Top 25, CIS.
• Have relevant experience to perform IT audit using certain IT Governance framework and IT Security best practices.
• Understanding the concept of operating system, network, database, and cloud technology is a bonus.
• Preferably to process and result oriented.
• Good at maintaining documents.