Information Security & Digital Risk Management

Bank OCBC NISP; Jakarta Pusat; On-site; IDR 250,000,000 - 480,000,000; Full time

Job summary

Bank OCBC NISP seeks an Information Security & Digital Risk Management professional to lead end-to-end security assessments, identify vulnerabilities, and propose risk mitigations across applications and networks. You will collaborate with Business and Technology teams to address risks.

The role requires SDLC and DevSecOps proficiency, security testing, and analytics tooling (Excel, Power BI, SQL); Python/Java skills and cloud/open source security tool knowledge are a plus.

Qualifications

• Bachelor degree in IT/Cybersecurity or related field.
• Experience in IT application development, IT audit, security testing, analytics.
• Proficiency in DevSecOps, SDLC, security testing and reporting tools.
• Experience with Python and Java programming.

Responsibilities

• Conduct end-to-end security assessments of applications and networks.
• Identify vulnerabilities and propose risk mitigation strategies.
• Collaborate with Business and Technology teams to address technology risks.
• Track findings and provide data for management reporting.

Skills

DevSecOps

SDLC

Security testing

Data analysis

Reporting dashboards

Python

Java

Education

Bachelor's degree in Information Technology or Cybersecurity

Tools

Microsoft Excel

Power BI

SQL

QlikView

R

Open source security tools

Job description

Information Security & Digital Risk Management

Trending

Job Description

Requirements:

• Bachelor degree in Information Technology/ Cybersecurity, and related fields.
• Experience in IT Application development, Audit IT, assessment security testing, analytics.
• Proficiency in DevSecOps, SDLC, security testing - penetration testing, data analysis and reporting tools/dashboard ( e.g Microsoft Excel, Power BI, SQL),
• Experience in application programming language (Python, Java)
• Knowledge in Virtual Machine, cloud environment, open source.
• Knowlledge in open source security tools.
• Experience on compiling data/logs with SQL, power BI, QlikView, R, excel formula for reporting.
• Experience as business analyst, application developer.

Roles and responsibility :

• Conduct thematic assessment and review end to end application, identify potential security vulnerabilities and threats to application, network in Bank’s system,
• Communication and propose point of improvement, risk mitigation strategies/control. based on findings.
• Collaborate with other departments (Business team and Technology team) to assess and address technology-related risks across the Bank.
• Tracking and monitoring continuous findings
• Established thematic theme continuously.
• Supply data for management, develop visualize trends, matrix for management reporting.
• Investigate/asses incident to discover root cause.