Security Governance Specialist

CIMB Niaga; Tangerang Selatan; On-site; IDR 350,000,000 - 550,000,000; Full time

Job summary

CIMB Niaga in Indonesia seeks a Security Governance Specialist to oversee routine and structured information security governance, including policy exception documentation, risk data collection, and audit materials preparation for management and regulators.

You will monitor deadlines for control testing, escalate delays to a supervisor, and coordinate with internal and external auditors to ensure regulatory compliance in a highly regulated banking environment.

Qualifications

• Minimum Bachelor's degree (S1) in Information Technology, Information Systems, Computer Science, Risk Management, or a related field.
• 3–4 years of work experience in information security governance, GRC, IT audit, IT risk management, or IT governance.
• Experience in banking/financial services or highly regulated environments is an advantage.
• Experience in preparing documentation for internal audits, external audits, and regulatory requirements.

Responsibilities

• Oversee routine and structured administration of information security governance.
• Document policy exceptions and collect risk data.
• Prepare control testing evidence and compile audit materials for management and regulators.
• Monitor task deadlines and escalate delays to a supervisor.

Skills

GRC experience

Information security governance

Audit readiness

Education

Bachelor's degree in Information Technology/Information Systems/Computer Science/Risk Management

Job description

The Security Governance Specialist is responsible for the routine and structured administration of information security governance, encompassing policy exception documentation, risk data collection, the preparation of control testing evidence, and the compilation of audit materials and reports for management and regulators. This position also involves monitoring task completion deadlines and escalating delays to a supervisor.

Qualifications:

• Minimum Bachelor's degree (S1) in Information Technology, Information Systems, Computer Science, Risk Management, or a related field.
• At least 3-4 years of work experience in information security governance, risk & compliance (GRC), IT audit, IT risk management, or IT governance.
• Experience in the banking/financial services industry or companies operating in highly regulated environments (e.g., supervised by OJK/BI) is an advantage.
• Experience in preparing documentation for internal audits, external audits, and/or regulatory requirements.