Cyber & Information Security Associate Manager

Evermos; Kota Bandung; On-site; IDR 15.000.000 - 25.000.000; Full time

Job summary

A technology company based in Bandung is seeking an IT Security specialist to ensure compliance with ISO 27001 standards. The role requires extensive experience in IT security governance, hands-on knowledge of security monitoring tools, and the ability to conduct security assessments and awareness campaigns. Candidates should possess strong analytical skills and relevant IT certifications to qualify for this vital position.

Qualifications

• 4+ years of experience in IT Security or similar fields.
• Understanding of ISO 27001 security controls.
• Hands-on experience with penetration testing.

Responsibilities

• Be the subject matter expert on ISO 27001 compliance.
• Define metrics for security testing effectiveness.
• Conduct security awareness campaigns.

Skills

IT Security

Risk Management

Analytical Skills

Communication Skills

Education

Relevant IT certifications (CISSP, CISM, etc.)

Tools

SIEM Technologies

Device Fingerprint Technologies

Job description

Responsibilities

• Be the subject matter expert on all ISO 27001 related governance & compliance
• Define metrics and key performance indicators to determine the effectiveness of the security testing, tooling & automation program
• Contributing in security / potential fraud loophole assessment in application development & company's strategic project (proactive in giving solution or best practices approach to minimizecyber/ fraud risk)
• Maintain and developing Fraud Detection / Prevention System in order to eliminate potential financial loss
• Project Management & Execution
• Conduct Information Security Awareness Campaign Strategy and execution
• Improve the analysis and defense techniques and tactics to combat new types and sources of threats and attacks

Requirements

• Should have vast experience minimum 4 years in relevant field (IT Security / IT Auditor / IT Governance / IT Compliance)
• Understanding in ISO 27001 security control & risk management concept
• Hands-on / experience with SIEM (Security Incident Event Monitoring) technologies
• Hands-on / experience Device Fingerprint Technologies, Fraud Detection System (Plus point)
• Hands-on / experience with database query (Plus point)
• Have a strong analytical skill with good communication and interpersonal skills
• Nice to have certifications: CISSP / CISM / CISA / CCSP / CCSK / AWS Cloud Security / CEH / CND (Plus point)
• Hands-on / experience in penetration testing (Black, White, Grey box) process & tooling
• Skills in office tools (excel, presentation, visio or cloud document utility tools)

NOTE:

Evermos is committed to providing an inclusive environment where equal opportunities are available to all applicants regardless of race, color, religion, gender, national origin, disability, age, genetic information, marital status, pregnancy, or related condition. We will not tolerate discrimination or harassment based on any of these characteristics.

We also emphasize the importance of diversity in all aspects of employment including recruitment, hiring, promotions, training, and organization operations.