IT Governance & Cybersecurity Sr. Specialist

PT Asuransi Jiwa Sequis Life; Jakarta Selatan; On-site; IDR 420,000,000 - 660,000,000; Full time

Job summary

PT Asuransi Jiwa Sequis Life is seeking an experienced Information Security leader to design and implement cybersecurity strategy, IT risk management, and governance controls across the organization. The role oversees SOC operations, threat monitoring, incident response, forensic investigations, and recovery activities while maintaining ISMS compliance with ISO 27001 and OJK regulations.

You will conduct IT risk assessments, security reviews, VA and pentesting, coordinate audits, DR planning,

Qualifications

• Bachelor's degree in IT, computer science, cybersecurity, information systems, or related field.
• Minimum 5 years of experience in IT governance, cybersecurity, IT risk management, or information security.
• Strong knowledge of IT governance frameworks, ISMS, and IT risk management.
• Experience in SOC operations, vulnerability assessment, penetration testing, incident response, and remediation.
• Familiarity with OJK regulations; insurance/financial services experience preferred.
• Certifications such as CISSP, CISM, CISA, CEH, or ISO 27001 are a plus.

Responsibilities

• Develop and implement cybersecurity strategy, IT risk management, and governance controls.
• Oversee SOC operations, threat monitoring, incident response, forensic investigations, and recovery activities.
• Lead IT risk assessments, security reviews, VA, penetration testing, and remediation plans.
• Maintain ISMS and ensure compliance with ISO 27001, OJK regulations, and other security frameworks.
• Coordinate IT security audits, access control reviews, security awareness programs, and security controls across IT.
• Coordinate Disaster Recovery (DR) planning and exercises, ensuring RTO/RPO alignment.

Skills

Stakeholder management

Analytical thinking

Communication skills

Education

Bachelor's degree in IT / Computer Science / Cybersecurity / Information Systems

Tools

CISSP

CISM

CISA

CEH

ISO 27001

Job description

Job Descriptions:

• Develop and implement cybersecurity strategies, IT risk management, and governance controls.
• Oversee SOC operations, threat monitoring, incident response, forensic investigations, and recovery activities.
• Lead IT risk assessments, security reviews, Vulnerability Assessments (VA), penetration testing, and remediation plans.
• Maintain ISMS and ensure compliance with ISO 27001, OJK regulations, and other applicable security frameworks.
• Coordinate IT security audits, access control reviews, security awareness programs, and security controls across IT infrastructure and architecture.
• Coordinate Disaster Recovery (DR) planning and exercises, ensuring compliance with agreed RTO/RPO and supporting business continuity.

Requirements:

• Bachelor's Degree in Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field.
• Minimum 5 years of experience in IT Governance, Cybersecurity, IT Risk Management, or Information Security.
• Strong knowledge of IT governance, cybersecurity frameworks, ISMS, ISO 2701 0, and IT risk management.
• Experience in SOC operations, vulnerability assessment, penetration testing, incident response, and security remediation.
• Familiarity with OJK regulations, IT audits, access controls, Disaster Recovery, and Business Continuity; experience in the insurance or financial services industry is preferred.
• Relevant certifications such as CISSP, CISM, CISA, CEH, or ISO 27001 are a plus, along with strong analytical, communication, and stakeholder management skills.