SeaBank Indonesia - IT Security

SeaBank Indonesia; Indonesia; On-site; IDR 180,000,000 - 300,000,000; Full time

Job summary

SeaBank Indonesia membutuhkan profesional IT GRC berpengalaman untuk mengembangkan dan memelihara kebijakan, standar, dan prosedur TI sesuai persyaratan internal/eksternal serta regulasi di Indonesia.

Peran ini berkolaborasi dengan kepatuhan, auditor, dan tim TI untuk memastikan kepatuhan, mitigasi risiko, dan penerapan kerangka kerja seperti ISO27001/ITIL/COBIT/PCI-DSS. Pengalaman di sektor asuransi/layanan keuangan merupakan nilai tambah.

Qualifications

• 3–5 tahun pengalaman di IT GRC, IT Governance, Risk & Compliance di industri asuransi atau layanan keuangan
• Kemampuan komunikasi dan menulis yang baik
• Menguasai kebijakan TI dan prosedur keamanan informasi
• Pengalaman implementasi ISO 27001, ITIL, COBIT, dan/atau PCI-DSS
• Familiar dengan peraturan lokal dan regional serta dampaknya terhadap kebijakan TI

Responsibilities

• Mengembangkan dan memelihara kebijakan, standar, dan prosedur TI sesuai persyaratan internal/eksternal dan peraturan di Indonesia
• Berkolaborasi dengan kepatuhan untuk memastikan inisiatif mematuhi standar
• Melakukan evaluasi rutin implementasi kebijakan untuk mitigasi risiko dan kepatuhan
• Berperan sebagai liaison antara pengguna TI dan auditor internal/eksternal
• Menerapkan tata kelola yang baik menggunakan kerangka ISO27001 atau yang lain
• Memantau KRI dan RCSA terkait TI untuk menilai efektivitas pengendalian

Skills

Information Security

IT Governance

Risk and Compliance

Audit Coordination

English communication

Job description

Deskripsi Pekerjaan

• Develop and maintain IT policies, standards, and procedures according to applicable internal and external requirements, including the applicable regulations in Indonesia
• Coordinate with compliance to ensure that every initiative, development, and collaboration is complying with standards (internal and external)
• Conduct a routine evaluation of policies and procedures implementation and ensure best practice risk mitigation and assessment functions are maintained to comply with the company's strategy
• Act as a liaison officer between IT user and external / internal auditor to meet the requirement and supply any advisory and sufficient data
• Implement a good governance organization using the ISO27001 framework or others
• Maintain key risk indicator (KRI) and risk control assessment (RCSA) related IT with the relevant department in order to assess the effectiveness of any control and identify new risks

Persyaratan

• 3-5 years experience as Information Security, IT Governance, Risk and Compliance (IT GRC) or IT Auditors or IT Risk in Insurance or Financial Service industry
• Demonstrate good communication and writing skills
• Proficient with English written and verbal
• Experience in creating and maintaining IT and/or information security policies and procedures
• Prior experience in implementing ISO 27001, ITIL, COBIT, and/or PCI-DSS standards
• Familiarity with local and regional regulatory requirements and how they impact IT policies (prior experience will be an advantage)