Cyber Security Governance & Compliance

PT Bumi Amartha Teknologi Mandiri; Jakarta Pusat; On-site; IDR 120,000,000 - 180,000,000; Full time

Job summary

PT Bumi Amartha Teknologi Mandiri mencari tenaga ahli IT Security Governance untuk mengelola dokumentasi kebijakan, kontrol, dan pemetaan kepatuhan. Posisi ini melibatkan peninjauan permintaan keamanan, persetujuan dokumentasi, serta dukungan audit internal maupun eksternal.

Kandidat diharapkan berpengalaman minimal 1 tahun di governance keamanan TI dan mahir Jira/Confluence. Lokasi kerja di Jakarta Pusat dengan sistem kerja on-site.

Qualifications

• Gelar Sarjana di TI, SI, Keamanan Siber, atau bidang terkait.
• Pengalaman minimal 1 tahun di IT Security Governance, Information Security, Risk Management, atau Compliance.
• Familiar dengan kerangka kerja keamanan siber, kebijakan keamanan, prosedur, dan pemetaan kontrol.
• Pengalaman dalam kepatuhan ISO 27001, dok Dokument ISMS, dan persiapan audit diutamakan.
• Terampil mendukung audit internal maupun eksternal, termasuk persiapan bukti audit dan follow-up temuan.
• Terampil dalam proses penilaian keamanan, tinjauan kepatuhan, dan manajemen dokumentasi.
• Mahir menggunakan Jira, Confluence, Microsoft Office, dan Microsoft Teams.
• Keterampilan komunikasi, analitis, dokumentasi, dan koordinasi dengan pemangku kepentingan.
• Teliti, terorganisir, dan mampu mengelola banyak permintaan penilaian dan tindak lanjut.

Responsibilities

• Mengelola dan memelihara dokumentasi mapping keamanan berdasarkan persyaratan, kontrol, dan standar organisasi.
• Mengembangkan dan memelihara kebijakan keamanan siber, prosedur, dan dokumentasi governance terkait.
• Menangani tiket penilaian terkait keamanan siber dan persyaratan governance.
• Menilai dan memvalidasi permintaan masuk untuk memastikan kepatuhan kebijakan keamanan.
• Mengelola proses persetujuan untuk permintaan dan dokumentasi terkait keamanan dan governance.
• Mengoordinasikan dan menindaklanjuti tiket penilaian sepanjang proses tinjauan dan persetujuan.
• Mendukung kegiatan terkait ISO, termasuk persiapan dan koordinator bukti yang diperlukan.
• Mendukung audit internal dan eksternal dengan menyiapkan dokumentasi, bukti, dan penilaian yang diperlukan.
• Berkolaborasi dengan pemangku kepentingan agar persyaratan governance keamanan dan audit terpenuhi.
• Memelihara dokumentasi dan bukti untuk mendukung governance keamanan, kepatuhan, dan kesiapan audit.

Skills

Jira

Confluence

Microsoft Office

Microsoft Teams

Kemampuan komunikasi

Analytical thinking

Dokumentasi

Koordinasi stakeholder

Education

Gelar Sarjana di TI / SI / Keamanan Siber

Tools

Jira

Confluence

Job description

DESKRIPSI PEKERJAAN

• Manage and maintain security governance mapping documents based on applicable requirements, controls, and organizational standards.
• Develop and maintain cybersecurity policies, procedures, and governance-related documentation.
• Handle assessment tickets related to cybersecurity and governance requirements.
• Assess and validate incoming requests to ensure they comply with applicable security policies and requirements.
• Manage the approval process for security and governance-related requests and documentation.
• Coordinate and follow up on assessment tickets throughout the review and approval process.
• Support ISO-related activities, including preparation and coordination of required documentation and evidence.
• Support internal and external audit activities by preparing documentation, evidence, and required assessments.
• Coordinate with relevant stakeholders to ensure cybersecurity governance and audit requirements are properly addressed.
• Maintain documentation and evidence to support security governance, compliance, and audit readiness.

KUALIFIKASI MINIMUM

• Bachelor's degree in Information Technology, Information Systems, Cybersecurity, or a related field.
• Minimum 1 years of experience in IT Security Governance, Information Security, Risk Management, or Compliance.
• Familiar with cybersecurity governance frameworks, security policies, procedures, and control mapping.
• Experience in ISO 27001 compliance, ISMS documentation, and audit preparation is preferred.
• Experienced in supporting internal and external audits, including preparing audit evidence and following up on audit findings.
• Familiar with security assessment processes, compliance reviews, and documentation management.
• Proficient in Jira, Confluence, Microsoft Office, and Microsoft Teams.
• Strong communication, analytical thinking, documentation, and stakeholder coordination skills.
• Detail-oriented, organized, and able to manage multiple assessment requests and follow-up activities.

RINGKASAN PERKERJAAN

• *SPESIALISASI**: IT and Software
• *PENDIDIKAN MINIMAL**: S1 (Sarjana)
• *SISTEM KERJA**: On-site
• *TIPE PEKERJAAN**: Full time
• *LOKASI**: Central Jakarta, DKI Jakarta, Indonesia
• *INDUSTRI**: Information Technology / IT
• *SITUS PERUSAHAAN**: https://www.amartek.id/

TENTANG PERUSAHAAN

Bumi Amartha Teknologi Mandiri or “AMARTEK” was established to provide information technology solutions. Our mission from the very first day has been to cultivate professional relationships with our clients to provide effective and reliable information technology solutions for their needs. The team at "AMARTEK" is equipped with a highly developed skillset developed over decades of experience not only in information technology but also in business processes across a range of industry sectors. This business experience makes us uniquely positioned to offer solutions promising greater operational efficiency, productivity gains and cost savings for each of our clients, regardless of their industry.

As an established technology-intensive company, we pride ourselves on providing a comprehensive suite of solutions comprising of Infrastructure Consultancy, on/offsite services, Custom software and web development, Talent Augmentation, and enterprise architecture consulting. Our team consistently delivers state-of-the-art solutions in various areas including, but not limited to: integrated business solutions, system applications, product development and professional services.

At "AMARTEK", we guarantee rapid, reliable and robust information technology solutions that work.