IT Governance

PT Kiwoom Sekuritas Indonesia; Jakarta Utara; On-site; IDR 200.000.000 - 300.000.000; Full time

Job summary

A leading online trading securities firm in Indonesia is seeking an experienced IT Security Manager. The role involves conducting risk assessments, ensuring compliance with relevant regulations, and leading security reviews and penetration testing programs. Key responsibilities include developing IT policies, managing incident responses, and maintaining the Information Security Management System (ISMS). The ideal candidate will need a strong understanding of IT security and compliance frameworks and a degree in a related field.

Qualifications

• Experience in IT governance, risk management, and compliance.
• Knowledge of ISMS frameworks and standards.
• Strong analytical skills and attention to detail.

Responsibilities

• Conduct regular risk assessments of IT processes.
• Develop IT policies for compliance with regulations.
• Design controls to mitigate identified risks.
• Lead security reviews and penetration tests.
• Manage incident response and forensic investigations.

Skills

Risk assessment

Compliance knowledge

Incident response

Security audits

ISMS management

Training and awareness programs

Education

Degree in Information Technology or related field

Tools

ISO 27001 standards

IT governance tools

Job description

IT Security Manager

PT Kiwoom Sekuritas Indonesia (KSI) is a subsidiary of Kiwoom Securities Co., Ltd. (Kiwoom) in Korea, owning a 70% stake in KSI. KSI is a leading online trading securities firm in Korea, holding the largest market share in brokerage services for more than seven consecutive years. Established in Indonesia since December 1995 through a joint venture between Korea and Indonesia and fully acquired by Kiwoom in January 2011, KSI operates across multiple branches and has expanded its business to serve both local and Korean clients.

Responsibilities

• Conduct regular risk assessments to identify and evaluate potential risks associated with IT processes, systems, and data.
• Stay informed about relevant laws, regulations, and industry standards impacting IT operations; develop and maintain a compliance framework to ensure adherence to applicable requirements; conduct compliance audits and assessments to verify alignment with established standards.
• Develop and update IT policies, procedures, and guidelines to address compliance requirements and mitigate identified risks; communicate and educate employees on IT policies and compliance expectations.
• Design and implement controls and safeguards to mitigate identified risks; monitor and assess the effectiveness of existing controls and recommend improvements as necessary.
• Provide training and awareness programs to ensure employees understand and adhere to IT security and compliance policies.
• Maintain accurate and up-to-date documentation related to IT governance, risk, and compliance activities; generate reports for management outlining compliance status, risk levels, and recommended actions.
• Maintain the Information Security Management System (ISMS) and compliance frameworks (ISO 27001, OJK & IDX).
• Lead IT risk assessments, security reviews, and penetration testing programs.
• Manage incident response, forensic investigations, and recovery processes.
• Support business continuity and participate in IT audits and risk assessments.

Location: West Jakarta, Jakarta, ID