Cyber & Information Security Associate Manager

Evermos; Kota Bandung; On-site; IDR 300,000,000 - 400,000,000; Full time

Job summary

An established industry player is seeking a skilled IT Security Expert to enhance their governance and compliance frameworks. In this pivotal role, you will lead initiatives related to ISO 27001, assess potential fraud risks, and develop robust fraud detection systems. You will also define key performance indicators to measure security effectiveness and conduct awareness campaigns to foster a culture of security within the organization. This position offers a unique opportunity to make a significant impact in a dynamic environment, where your expertise will help safeguard the company's assets and reputation against emerging threats. If you're passionate about IT security and eager to drive change, this role is for you.

Qualifications

• Minimum 4 years experience in IT Security, IT Governance, or IT Compliance.
• Understanding of ISO 27001 security control & risk management.

Responsibilities

• Be the subject matter expert on ISO 27001 governance & compliance.
• Conduct security awareness campaigns and improve defense techniques.

Skills

Analytical Skills

Communication Skills

IT Security

IT Governance

IT Compliance

Penetration Testing

Education

Bachelor's Degree in IT or related field

Tools

SIEM Technologies

Device Fingerprint Technologies

Fraud Detection System

Database Query Tools

Office Tools (Excel, Visio)

Job description

Responsibilities :

• Be the subject matter expert on all ISO 27001 related governance & compliance
• Define metrics and key performance indicators to determine the effectiveness of the security testing, tooling & automation program
• Contribute to security / potential fraud loophole assessment in application development & company's strategic project (proactive in giving solutions or best practices approach to minimize cyber/ fraud risk)
• Maintain and develop Fraud Detection / Prevention System in order to eliminate potential financial loss
• Project Management & Execution
• Conduct Information Security Awareness Campaign Strategy and execution
• Improve the analysis and defense techniques and tactics to combat new types and sources of threats and attacks

Requirements :

• Should have vast experience minimum 4 years in relevant field (IT Security / IT Auditor / IT Governance / IT Compliance)
• Understanding of ISO 27001 security control & risk management concept
• Hands-on experience with SIEM (Security Incident Event Monitoring) technologies
• Hands-on experience with Device Fingerprint Technologies, Fraud Detection System (Plus point)
• Hands-on experience with database query (Plus point)
• Have strong analytical skills with good communication and interpersonal skills
• Nice to have certifications: CISSP / CISM / CISA / CCSP / CCSK / AWS Cloud Security / CEH / CND (Plus point)
• Hands-on experience in penetration testing (Black, White, Grey box) process & tooling
• Skills in office tools (Excel, presentation, Visio or cloud document utility tools)

NOTE:

Evermos is committed to providing an inclusive environment where equal opportunities are available to all applicants regardless of race, color, religion, gender, national origin, disability, age, genetic information, marital status, pregnancy, or related condition. We will not tolerate discrimination or harassment based on any of these characteristics.

We also emphasize the importance of diversity in all aspects of employment including recruitment, hiring, promotions, training, and organization operations.