Cyber Security Lead

Evermos; Kota Bandung; On-site; IDR 180,000,000 - 360,000,000; Full time

Job summary

Evermos seeks a seasoned Cyber Security Leader to manage and advance our security posture, with hands-on exposure to cloud tech and security controls. You will drive SIEM and DLP initiatives, coordinate incident management, and align governance with ISO 27001 standards, ensuring timely delivery of secure outcomes.

You will collaborate with governance and CIS teams to mature our security culture and organizational capabilities, while overseeing projects and key risk controls across the security

Qualifications

• Minimum 4 years in IT Security / SOC Engineer / Information Security / DevSecOps.
• Understanding ISO 27001 security controls & risk management concepts.
• Hands-on experience with SIEM technologies.
• Hands-on experience with Device Fingerprint Technologies / fraud detection (plus).
• Strong analytical and communication skills.
• Certs: CISSP / CISM / CISA / CCSP / AWS Cloud Security / CEH (plus).
• Hands-on experience in penetration testing (various box approaches).
• Hands-on with Web Application Firewall & Endpoint Security technologies.

Responsibilities

• Monitor and evaluate cyber security controls (WAF, Endpoint Security) daily to prevent and detect threats.
• Create/assist OKR/KPI setting for the cyber security team.
• Be primary contact for cyber security incident management.
• Develop SIEM to proactively detect and identify threats.
• Develop DLP strategy and execution.
• Manage cyber security projects with timelines and deliverables.
• Develop SOPs / policies with governance teams for security posture.
• Assist ISO 27001 implementation and maintain certification culture.
• Drive strategy and org development for CIS department goals.

Skills

IT Security

SIEM

ISO 27001

Penetration Testing

Cloud Security

DLP

WAF

Endpoint Security

Security Governance

Education

Bachelor's degree in a related field

CISSP

CISM

CCSP

Tools

SIEM tools

WAF platforms

Fraud Detection System

Job description

General Description

Overall, this position's main responsibility is for managing & development of our Cyber Security posture, focusing on technological control. Technical hands-on is needed & must understand about cloud technologies stack

Key Responsibilities

List key responsibilities of this position that are required daily.

1. Monitor & continuously evaluate current technical configuration in our cyber security controls such as WAF and Endpoint Security, etc in order to effectively prevent & detect the cyber threats
2. Create / Assisting OKR / KPI setting for cyber security team
3. Be primary point of contact for cyber security incident management
4. Technically develop our SIEM to proactively detect & identify incoming threats
5. Technically develop DLP (Data Leakages Prevention) strategy & execution
6. Project Management for cyber security team (Ensuring timeline & good deliverables)
7. Work closely with information security governance team related SOP’s / Policies development to ensure our security posture meet their key results
8. Assisting the implementation of ISO 27001 program (Retaining certification & culture maturity fit)
9. Drive strategy & Organization development for cyber security team to help CIS department in achieving their goals

Required Qualifications

• Should have vast experience minimum 4 years in relevant field (IT Security / SOC Engineer / Information Security / DevSecOps
• Understanding in ISO 27001 security control & risk management concept
• Hands-on / experience with SIEM (Security Incident Event Monitoring) technologies
• Hands-on / experience Device Fingerprint Technologies, Fraud Detection System (Plus point)
• Hands-on / experience with database query (Plus point)
• Have a strong analytical skill with good communication and interpersonal skills
• Nice to have certifications: CISSP / CISM / CISA / CCSP / CCSK / AWS Cloud Security / CEH / CND (Plus point)
• Hands-on / experience in penetration testing (Black, White, Grey box) process & tooling
• Hands-on / experience in Web Application Firewall & Endpoint Security Technologies
• Skills in office tools (excel, presentation, visio or cloud document utility tools)

Evermos is committed to providing an inclusive environment where equal opportunities are available to all applicants regardless of race, color, religion, gender, national origin, disability, age, genetic information, marital status, pregnancy, or related condition. We will not tolerate discrimination or harassment based on any of these characteristics.

We also emphasize the importance of diversity in all aspects of employment including recruitment, hiring, promotions, training, and organization operations.