IT Security Operations Officer

Bank Sahabat Sampoerna; Indonesia; On-site; IDR 89,280,000 - 156,240,000; Full time

Job summary

Bank Sahabat Sampoerna seeks an IT Security Operations Officer to monitor security using SIEM, WAF and EDR, analyze alerts, and lead incident handling from triage to resolution. The role collaborates across IT and vendor teams to ensure remediation and SLA adherence, while supporting audits and improving security controls.

The ideal candidate has at least 1 year in IT security, strong risk awareness, and familiarity with security regulations and frameworks.

Qualifications

• Minimum 1 year of experience in IT Security or Cyber Security Operations.
• Strong understanding of fundamental information security concepts including network and system security, SIEM and related technologies.
• Exposure to or hands-on experience with red team/penetration testing at junior level, including vulnerability scanning and basic exploitation techniques.
• Familiarity with security solutions such as SIEM, WAF, EDR and vulnerability scanners.
• Good understanding of access management concepts including MFA and privileged access management.
• Ability to perform basic information security risk analysis and demonstrate risk awareness.
• Strong analytical and reporting skills for clear, management-friendly reports.
• Knowledge of standards like OJK, Bank Indonesia, ISO 27001, and NIST is an advantage.

Responsibilities

• Perform daily IT security monitoring using SIEM, WAF, EDR and other security platforms.
• Analyze alerts and logs to identify potential incidents, anomalies and suspicious activities.
• Execute incident handling: identification, triage, investigation, escalation and resolution.
• Coordinate with IT Infra, Applications, Vendor/SOC and related teams for remediation and improvements.
• Monitor remediation activities to ensure actions meet SLA requirements.
• Ensure effective implementation and performance of security tools and platforms.
• Collaborate with internal IT teams and external vendors to maintain security operations.
• Monitor system vulnerabilities and ensure remediation within SLA timelines.
• Support audits (OJK, Bank Indonesia, external auditors) with data, evidence and documentation.

Skills

IT security operations

Incident handling

Risk analysis

Analytical reporting

Security regulations knowledge

Tools

SIEM

WAF

EDR

Vulnerability scanners

Job description

Bank Sahabat Sampoerna is looking for an IT Security Operations Officer who will be responsible for the following:

• Perform daily IT security monitoring activities using tools such as SIEM, WAF, EDR, and other security platforms.
• Analyze alerts and logs to identify potential security incidents, anomalies, and suspicious activities.
• Execute incident handling processes, including identification, triage, investigation, escalation, and resolution of security incidents.
• Conduct coordination and follow-up activities with IT Infrastructure, Application, Vendor/SOC, and related teams to support system remediation and improvement initiatives.
• Monitor and evaluate remediation activities to ensure corrective actions are implemented in accordance with established SLA requirements.
• Ensure the effective implementation and operational performance of security tools and platforms, including SIEM, WAF, DLP, Antivirus/EDR, and others.
• Collaborate with internal IT teams and external vendors to maintain the stability, security, and effectiveness of security operations.
• Perform monitoring and assessment of system vulnerabilities to ensure remediation actions are completed within the agreed SLA timeline.
• Support internal and external audit activities (OJK, Bank Indonesia, external auditors, etc.) by preparing the required data, evidence, and documentation.

For this position, we will need someone who:

• Minimum 1 year of experience in IT Security or Cyber Security Operations.
• Strong understanding of fundamental information security concepts, including network security, system security, SIEM, and related technologies.
• Exposure to or hands-on experience with red team/penetration testing activities at the junior level, including vulnerability scanning, basic exploitation techniques, and automated security testing tools (preferred).
• Familiarity with security solutions and technologies such as SIEM, WAF, EDR, Vulnerability Scanners, and similar platforms.
• Good understanding of access management concepts, including access control, Multi-Factor Authentication (MFA), and privileged access management.
• Ability to perform basic information security risk analysis and demonstrate strong risk awareness.
• Strong analytical and reporting skills, with the ability to prepare clear, structured, and management-friendly reports.
• Knowledge of security regulations, frameworks, and standards such as OJK regulations, Bank Indonesia regulations, ISO 27001, and NIST is an advantage.