Associate - Risk Assurance - IT Cybersecurity (Talent Pool)

PwC; Daerah Khusus Ibukota Jakarta; Sur place; IDR 120 000 000 - 180 000 000; Plein temps

Résumé du poste

A global professional services firm is seeking an Associate for Risk Assurance in IT Cybersecurity in Jakarta. In this role, you will assess and implement cybersecurity measures, engage with clients to deliver solutions, and prepare professional reports. Ideal candidates should have a Bachelor's degree in Information System, report proficiently in English and Bahasa Indonesia, and possess knowledge of relevant cybersecurity standards. Certifications in cybersecurity are advantageous. Up to 40% travel required.

Qualifications

• Minimum Bachelor degree(s).
• Good professional reporting skills in Bahasa Indonesia and English.
• Good knowledge of relevant cybersecurity standards / frameworks.
• Good experience and knowledge in IT technical and controls.
• Having related cybersecurity certificate is an advantage.

Responsabilités

• Perform assessment/design/implementation related to cybersecurity.
• Interact with clients on solutions and execute projects.
• Prepare concise and accurate documents/reports.
• Engage with clients, build relationships, and deliver security projects.
• Prepare concise documents/reports using MS Office.

Connaissances

Learning mindset

Ownership for development

Interpersonal communication

Commercial awareness

Professional standards application

Client communication

NIST/ISO frameworks

Formation

Bachelor Degree in Information System

Outils

MS Office (Word, Excel, Access, PowerPoint)

Description du poste

Associate - Risk Assurance - IT Cybersecurity

At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.

Those in application security at PwC will be responsible for providing security services to development teams including code scanning, readiness testing, and penetration testing to enable application teams to build and deploy secure applications in Production. You will utilise a risk-based methodology and “shift-left” approach to engage early in the software development lifecycle.

Driven by curiosity, you are a reliable, contributing member of a team. In our fast-paced environment, you are expected to adapt to working with a variety of clients and team members, each presenting varying challenges and scope. Every experience is an opportunity to learn and grow. You are expected to take ownership and consistently deliver quality work that drives value for our clients and success as a team. As you navigate through the Firm, you build a brand for yourself, opening doors to more opportunities.

Examples of the skills, knowledge, and experiences you need to lead and deliver value at this level include but are not limited to:

• Apply a learning mindset and take ownership for your own development.
• Appreciate diverse perspectives, needs, and feelings of others.
• Adopt habits to sustain high performance and develop your potential.
• Actively listen, ask questions to check understanding, and clearly express ideas.
• Seek, reflect, act on, and give feedback.
• Gather information from a range of sources to analyse facts and discern patterns.
• Commit to understanding how the business works and building commercial awareness.
• Learn and apply professional and technical standards (e.g. refer to specific PwC tax and audit guidance), uphold the Firm's code of conduct and independence requirements.

Responsibilities

• Perform assessment / Design/ implementation related to cybersecurity:
  • Governance using various standards / frameworks such as NIST, ISO 27000 family, PCI‑DSS, COBIT, CIS, and other established standards; or
  • Various application security and various infrastructure security (e.g. operating system, database, firewall, switches, API and other security devices). This includes security assessment on web applications / infrastructures / clouds / mobile applications; or
  • Cloud security; or
  • Red teaming exercise; or
  • Cyber incident response, threat hunting and incident analysis; or
  • Operation Technology security (preferably in energy, mining, utilities and oil & gas industry).
• Interacting with clients on solutions and executing projects on client engagements, forming client relationships and demonstrating an understanding of the client’s business.
• Preparing concise and accurate documents / report, leveraging and utilizing MS Office (Word, Excel, Access, PowerPoint).

Requirements

• Minimum Bachelor degree(s).
• Good professional reporting skills in Bahasa Indonesia and English.
• Good knowledge of relevant cybersecurity standards / frameworks.
• Good experience and knowledge in the general IT technical and controls, network, and security best practices.
• Having related cybersecurity certificate is an advantage:
  • Cybersecurity Governance area: Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM).
  • Application and Infrastructure security area: Offensive Security Certified Professional (OSCP) or Offensive Security Certified Expert (OSCE).
  • Cloud security: Certified Cloud Security Professional (CCSP) or advanced security certification from Cloud Service Provider.

Education

Degrees/Field of Study required: Bachelor Degree - Information System

Degrees/Field of Study preferred: Bachelor Degree - Information System

Travel Requirements

Up to 40%

Available for Work Visa Sponsorship?

No

Government Clearance Required?

No