It Security Operations Lead
The Fwd Group
Get a reply from this employer
Your resume and cover letter, tailored to exactly what they’re hiring for.
Job summary
The Fwd Group mencari IT Security Operations Lead untuk memimpin SecOps, memantau IVM, EVM, konfigurasi keamanan, WAF, cloud, dan endpoint, serta mengelola insiden dengan koordinasi BISO. Posisi ini menuntut pengalaman 10+ tahun di bidang IT security dan pemahaman mendalam terhadap SIEM, NGFW, dan kebijakan ISO27001.
Anda akan bekerja sama dengan tim IT Security dan pemangku kepentingan internal untuk meningkatkan postur keamanan, menerapkan praktik terbaik, dan memastikan kepatuhan terhadap
Qualifications
- Minimum 10 tahun pengalaman IT Security.
- Penguasaan alat dan praktik SecOps tingkat lanjut.
Responsibilities
- Pimpin tim SecOps harian (2 NFTE) untuk IVM & koordinasikan hasil dengan BISO.
- Pimpin aktivitas EVM, konfigurasi keamanan, WAF, cloud, dan kepatuhan endpoint.
- Kelola respons insiden, pemantauan ancaman, serta peringatan Threat Intelligence.
- Pastikan kepatuhan ISO27001 dan kebijakan keamanan di seluruh lingkungan.
- Kolaborasikan tugas SecOps dengan Group Information Security.
Skills
Education
Tools
Job description
Perusahaan: The Fwd Group | Jenis Pekerjaan: Full-Time | Jakarta, Indonesia
About FWD Group
FWD Group (1828.HK) is a pan-Asian life and health insurance business that serves approximately 40 million customers across 10 markets, including BRI Life in Indonesia. FWD's customer-led and tech-enabled approach aims to deliver innovative propositions, easy-to-understand products and a simpler insurance experience. Established in 2013, the company operates in some of the fastest-growing insurance markets in the world with a vision of changing the way people feel about insurance. FWD Group is listed on the main board of the Hong Kong Stock Exchange under the stock code 1828.
For more information, please visit www.fwd.com
PT FWD Insurance Indonesia (“FWD Insurance”), a joint-venture insurance company and a part of FWD Group, previously known as PT Commonwealth Life, has successfully merged with PT FWD Life Indonesia (“FWD Life”) as of 1 December 2020 and will be known as FWD Insurance.
The merger of FWD Life and FWD Insurance has led to a more comprehensive range of products, including unit-linked insurance, individual & group term life insurance, individual & group personal accident insurance, and group medical insurance through technology driven-distributions such as agency, bancassurance, e-commerce, and corporate.
FWD Insurance is registered and supervised under Otoritas Jasa Keuangan (“OJK”).
FWD Insurance is a member of Indonesia Financial Services Alternative Dispute Resolution Center.
IT security operation Lead to ensure security practices are deployed and aligned. The increasing threats on information security & governance, has put pressure on IT to ensure continuity while serving the complex business needs. Support assigned Local or group IT Security Operation.
- Lead the SecOps team (2 NFTE) in daily activities related to Internal Vulnerability Management (IVM), monitor and oversee progress, and coordinate results and issues with BISO.
- Lead the SecOps team (2 NFTE) in daily activities related to External Vulnerability Management (EVM), monitor and oversee progress, and coordinate results and issues with BISO.
- Lead the SecOps team (2 NFTE) in daily activities related to Security Configuration, monitor and oversee progress, and coordinate results and issues with BISO.
- Lead the SecOps team (2 NFTE) in daily activities related to Web Application Firewall (WAF), monitor and oversee progress, and coordinate results and issues with BISO.
- Lead the SecOps team (2 NFTE) in daily activities related to Cloud Security, monitor and oversee progress, and coordinate results and issues with BISO.
- Lead the SecOps team (2 NFTE) in daily activities related to Endpoint Compliance, monitor and oversee progress, and coordinate results and issues with BISO.
- Lead the SecOps team (2 NFTE) in daily activities related to Threat Intelligence Alerts, monitor and oversee progress, and coordinate results and issues with BISO.
- Lead the SecOps team (2 NFTE) in daily activities related to Incident Handling, monitor and oversee progress, and coordinate results and issues with BISO.
- Lead the SecOps team (2 NFTE) in daily activities related to Patch Advisory, monitor and oversee progress, and coordinate results and issues with BISO.
- Lead the SecOps team (2 NFTE) in daily activities related to DLP Alerts & Whitelisting Email and Web, monitor and oversee progress, and coordinate results and issues with BISO.
- Lead the SecOps team (2 NFTE) in daily activities related to Phishing Simulation, monitor and oversee progress, and coordinate results and issues with BISO.
- Lead the SecOps team (2 NFTE) in daily activities related to Mandatory Training & Handbook Sign, monitor and oversee progress, and coordinate results and issues with BISO.
- Lead the SecOps team (2 NFTE) in daily activities related to IAM and CyberArk PIDs, monitor and oversee progress, and coordinate results and issues with BISO.
- Lead the SecOps team (2 NFTE) in daily activities related to User Access Matrix (UAM) and User Access Review (UAR), monitor and oversee progress, and coordinate results and issues with BISO.
- Lead the SecOps team (2 NFTE) in daily activities related to Patching Management, monitor and oversee progress, and coordinate results and issues with BISO.
- Lead the SecOps team (2 NFTE) in daily activities related to Production Issues, monitor and oversee progress, and coordinate results and issues with BISO.
- Lead the SecOps team (2 NFTE) in daily activities related to Update Asset Inventory, monitor and oversee progress, and coordinate results and issues with BISO.
- To consult and coordinate all SecOps team activities with Group Information Security functions based on guidance from BISO.
- Minimum 10 years of experience in IT Security.
- Bachelor’s Degree in Information Technology or a related field.
- Proficient in using and operating Zscaler, CyberArk, Qualys, Orca, iTunes, ManageEngine, Blackkite, and CrowdStrike.
- Strong knowledge in incident detection, analysis, response, and remediation of security events.
- Experience in engineering, configuration, and troubleshooting of security systems.
- Familiarity with ISO 27001 is an advantage.
- Good understanding of endpoint protection, including servers, laptops, PCs, and firewalls.
- Strong knowledge of Next-Generation Firewalls (NGFW), Security Information and Event Management (SIEM), and Web Application Firewalls (WAF).
Proactive
- Be positive: Operate with a "can do" mindset
- Think ahead: Anticipate needs and empowered to take action without waiting to be told what to do
- Continuous Improvement: Seek out ways to raise the bar
Innovative
- Dare to be different: Find unique and creative solutions by thinking out of the box
- Be adaptive: Open to new ideas and embrace change
- Be ambitious: Take calculated risks, seize opportunities to learn and grow from failure
Committed
- Deliver on our promises: Follow through on commitments and meet deadlines
- Be the best we can be: Strive for high-quality work and persevere to stay focused
- Celebrate teamwork: Work collaboratively to achieve more
Caring
- Demonstrate customer-led approach: Prioritise customer needs and deliver exceptional value
- Seek to understand: Listen with empathy and consider diverse perspectives
- Treat everyone with respect: Use polite language, a courteous tone and embrace Diversity, Equity & Inclusion (DEI)
Open
- Be transparent: Share knowledge to empower others and foster trust
- Make the right decisions: Involving others, manage and mitigate risks and be decisive
- Champion integrity and ethics: Consider the impact of your actions and speak up when you feel something is wrong
- Vulnerability Management
- CEH Certification
- Information Security Operation
- Patch Management
- Endpoint compliance
- ISO270001
- Incident Handling
- Internal/External Audit
- 4 Key Risk Indicators (KRIs) of Cybersecurity from Group Information Security (GIS) are reported in the monthly GIS Management Report, with most KRIs consistently maintained at Low Risk.
- Implementation of cybersecurity tools and initiatives to strengthen the organization’s security posture.
- Endpoint protection: Daily updates of antivirus databases to ensure up-to-date threat defence.
- Real time 24/7 Monitoring of Security Information & Event Management
- Full protection of FWD systems' availability, confidentiality, and integrity from external compromises.
- Support for all operational processes to maintain quality and service levels for IDBU customers and stakeholders.
- Timely resolution of all open cyberattack events to minimize impact and restore normal operations.
- Closure of all cybersecurity-related audit findings in a timely and compliant manner.
- Head of Security & Governance (BISO)
- Information Security Group Officer
- Metrics, Reporting & Analytics
- Internal Audit
- IT Infrastructure
- Service Desk
The Fwd Group
We’re FWD. A different kind of insurer with a vision to change the way people feel about insurance. Discover our story.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
