Junior Cyber Security Governance & Compliance

Bumi Amartha Teknologi Mandiri; Jakarta Pusat; On-site; IDR 18,000,000 - 28,000,000; Full time

Job summary

Bumi Amartha Teknologi Mandiri in Jakarta seeks a Security & Governance Analyst to manage security governance mapping documents, develop policies, and align with organizational standards. You will handle assessment tickets, validate requests against security policies, coordinate approvals, and support ISO-related activities and audits with detailed documentation and evidence.

Ideal candidates hold a bachelor’s in IT/cybersecurity, with 1+ year in IT security governance and familiarity with

Qualifications

• Bachelor's degree in IT, information systems, cybersecurity or a related field is required.
• Minimum 1 year of experience in IT security governance, information security, risk management or compliance.
• Familiarity with cybersecurity governance frameworks, security policies, procedures and controls mapping.
• Experience with ISO 27001 compliance, ISMS documentation and audit preparation is preferred.
• Experience supporting internal and external audits, including preparing audit evidence and following up on audit findings.
• Familiar with security assessment processes, compliance reviews and documentation management.
• Proficient in Jira, Confluence, Microsoft Office and Microsoft Teams.

Responsibilities

• Manage and maintain security governance mapping documents based on applicable requirements, controls, and organizational standards.
• Develop and maintain cybersecurity policies, procedures, and governance-related documentation.
• Handle assessment tickets related to cybersecurity and governance requirements.
• Assess and validate incoming requests to ensure they comply with applicable security policies and requirements.
• Manage the approval process for security and governance-related requests and documentation.
• Coordinate and follow up on assessment tickets throughout the review and approval process.
• Support ISO-related activities, including preparation and coordination of required documentation and evidence.
• Support internal and external audit activities by preparing documentation, evidence, and required assessments.
• Coordinate with relevant stakeholders to ensure cybersecurity governance and audit requirements are properly addressed.
• Maintain documentation and evidence to support security governance, compliance, and audit readiness.

Skills

Communication

Analytical thinking

Documentation

Stakeholder coordination

Organizational skills

Detail-oriented

Education

Bachelor's degree in IT, Information Systems, Cybersecurity, or related field

Tools

Jira

Confluence

Microsoft Office

Microsoft Teams

Job description

• Manage and maintain security governance mapping documents based on applicable requirements, controls, and organizational standards.
• Develop and maintain cybersecurity policies, procedures, and governance-related documentation.
• Handle assessment tickets related to cybersecurity and governance requirements.
• Assess and validate incoming requests to ensure they comply with applicable security policies and requirements.
• Manage the approval process for security and governance-related requests and documentation.
• Coordinate and follow up on assessment tickets throughout the review and approval process.
• Support ISO-related activities, including preparation and coordination of required documentation and evidence.
• Support internal and external audit activities by preparing documentation, evidence, and required assessments.
• Coordinate with relevant stakeholders to ensure cybersecurity governance and audit requirements are properly addressed.
• Maintain documentation and evidence to support security governance, compliance, and audit readiness.

• Manage and maintain security governance mapping documents based on applicable requirements, controls, and organizational standards.
• Develop and maintain cybersecurity policies, procedures, and governance-related documentation.
• Handle assessment tickets related to cybersecurity and governance requirements.
• Assess and validate incoming requests to ensure they comply with applicable security policies and requirements.
• Manage the approval process for security and governance-related requests and documentation.
• Coordinate and follow up on assessment tickets throughout the review and approval process.
• Support ISO-related activities, including preparation and coordination of required documentation and evidence.
• Support internal and external audit activities by preparing documentation, evidence, and required assessments.
• Coordinate with relevant stakeholders to ensure cybersecurity governance and audit requirements are properly addressed.
• Maintain documentation and evidence to support security governance, compliance, and audit readiness.

Minimum Qualifications

• Bachelor's degree in Information Technology, Information Systems, Cybersecurity, or a related field.
• Minimum 1 years of experience in IT Security Governance, Information Security, Risk Management, or Compliance.
• Familiar with cybersecurity governance frameworks, security policies, procedures, and control mapping.
• Experience in ISO 27001 compliance, ISMS documentation, and audit preparation is preferred.
• Experienced in supporting internal and external audits, including preparing audit evidence and following up on audit findings.
• Familiar with security assessment processes, compliance reviews, and documentation management.
• Proficient in Jira, Confluence, Microsoft Office, and Microsoft Teams.
• Strong communication, analytical thinking, documentation, and stakeholder coordination skills.
• Detail-oriented, organized, and able to manage multiple assessment requests and follow-up activities.