Security Governance Specialist 1225

CIMB Niaga; Tangerang; On-site; IDR 400,000,000 - 900,000,000; Full time

Job summary

CIMB Niaga is seeking a Senior Security Governance Specialist in Tangerang, Indonesia. The role focuses on policy, standards, risk management, and cyber resilience to support enterprise information security governance.

The specialist will lead the design and execution of control testing, reporting, and governance activities, guiding audits and improving security posture across the organization.

Qualifications

• Senior expert in information security governance, covering policy and standards, risk and control testing, reporting, and cyber resilience.

Responsibilities

• Develop and maintain information security policies, standards, SOPs, and security baselines
• Analyze the risk of security exception requests and recommend compensating controls
• Conduct Risk Control Self Assessment (RCSA) and drive remediation of control weaknesses (CIM)
• Design and execute the Control Effectiveness Testing (CET) and QA testing program
• Prepare responses to internal audit, external audit, and regulatory findings
• Prepare periodic information security reports (KRI, RAS, LEM)
• Design and coordinate cyber drills and cyber crisis management exercises

Job description

All Jobs Security Governance Specialist 1225

Permanent

O725 Operations, Technology, Analytics & AI ID

Qualifications

Job Description

Job Summary

Senior expert in information security governance, covering policy and standards, risk and control testing, reporting, and cyber resilience. Handles the most complex governance cases and prepares decision recommendations for the Lead.

Key Responsibilities

• 1. Develop and maintain information security policies, standards, SOPs, and security baselines
• 2. Analyze the risk of security exception requests and recommend compensating controls
• 3. Conduct Risk Control Self Assessment (RCSA) and drive remediation of control weaknesses (CIM)
• 4. Design and execute the Control Effectiveness Testing (CET) and QA testing program
• 5. Prepare responses to internal audit, external audit, and regulatory findings
• 6. Prepare periodic information security reports (KRI, RAS, LEM)
• 7. Design and coordinate cyber drills and cyber crisis management exercises

People Development

• 1. Review KPI achievement with the line manager
• 2. Pursue continuous self-development and maintain professional certifications
• 3. Act as subject matter expert (SME) and mentor junior team members

Regulatory Compliance

• 1. Perform work in line with internal policies and regulatory requirements
• 2. Apply and document governance and risk management in own work