Security Manager

Jakarta Intercultural School; Jawa Barat; On-site; IDR 100.000.000 - 200.000.000; Full time

Job summary

A leading educational institution in Indonesia is seeking an experienced Security Manager to develop and implement a robust Risk Management framework. The role requires expertise in risk assessment and mitigation strategies, along with a strong understanding of Risk Management Frameworks. The ideal candidate will have over 5 years of experience and relevant certifications. This position emphasizes proactive risk management and collaboration with various departments to enhance overall security practices.

Qualifications

• Bachelor's Degree in Management, Finance, Engineering, or relevant fields.
• 5 years of experience in Risk Management, including 2 in a supervisory role.
• Strong understanding of Risk Management Frameworks (ERM, ISO, BCM).
• Professional certifications in Risk Management and/or BCM are preferred.
• Excellent analytical, problem-solving, and communication skills.
• Detail-oriented and able to work independently as well as part of a team.
• Fluent in English, both written and spoken.

Responsibilities

• Develop and maintain Risk Management framework.
• Identify, assess, and mitigate potential risks.
• Lead Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP) preparation.
• Conduct periodic risk assessments.
• Provide strategic recommendations on risk mitigation.
• Collaborate for effective risk management practices.
• Prepare risk reports for management and stakeholders.

Job description

Showing 7 Security Manager jobs in Jakarta Selatan

Posted 1 day ago

Job Description

Responsibilities:

• Develop, implement, and maintain the company's Risk Management framework in line with internal policies and applicable regulations.
• Identify, assess, monitor, and mitigate potential risks across business operations.
• Lead the preparation, maintenance, and testing of Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP).
• Conduct periodic risk assessments and ensure BCM simulations are effectively executed.
• Provide strategic recommendations to management on risk mitigation and business continuity improvement.
• Collaborate with internal departments to ensure effective risk management and BCM practices.
• Prepare risk reports and presentations for management and stakeholders.

Requirements:

• Minimum Bachelor's Degree in Management, Finance, Engineering, or other relevant fields.
• At least 5 years of experience in Risk Management, with a minimum of 2 years in a supervisory or assistant managerial role.
• Strong understanding of Risk Management Frameworks (ERM, ISO and Business Continuity Management (BCM).
• Relevant professional certifications in Risk Management and/or BCM are highly preferred.
• Excellent analytical, problem-solving, and communication skills.
• Detail-oriented, proactive, and able to work independently as well as part of a team.
• Fluent in English, both written and spoken (Active English is a must).

Enterprise Risk Management Framework & Methodology (ISO 31000)

• Risk Identification, Assessment & Mitigation
• Corporate Action & Strategic Risk Mapping

Manager Risk and Management

Posted 1 day ago

Enterprise Risk Management Officer

We are currently looking for a Enterprise Risk Management Officer to join our team. This role is essential in identifying, assessing, and mitigating various types of risk that could impact the company's operations, reputation, and compliance. You will help drive a strong risk culture and ensure the implementation of effective risk management strategies across the organization.

Key Responsibilities

• Identify, evaluate, and monitor operational, strategic, financial, and compliance risks
• Develop, review, and update risk management policies, procedures, and frameworks
• Conduct risk assessments and provide insights and recommendations to management
• Coordinate with internal teams to implement risk mitigation plans
• Prepare regular risk reports and maintain risk registers
• Ensure compliance with regulatory requirements and internal governance standards
• Promote risk awareness and provide training across business units

Requirements

• Bachelor's degree in Risk Management, Finance, Law, or a related field
• Minimum 2 years of experience in risk management, audit, or compliance
• Strong understanding of GRC (Governance, Risk, and Compliance) principles
• Analytical mindset with strong reporting and presentation skills
• Excellent communication and coordination abilities
• Risk management certifications (e.g., CRMP, ERM) are an advantage

IT Security Officer

Posted 1 day ago

• Monitor, analyze, and respond to cybersecurity alerts and incidents on a daily basis.
• Perform vulnerability assessments, log analysis, threat intelligence monitoring to proactively identify potential risks.
• Lead first‑line incident response, containment, and remediation activities for detected security threats.
• Ensure timely escalation and documentation of incidents according to established security procedures.
• Maintain and enhance endpoint, network, and application security controls.
• Conduct periodic reviews of firewall, access rights, system configurations to ensure compliance with company policies.
• Collaborate with IT infrastructure, application, and helpdesk teams to ensure consistent security enforcement.
• Coordinate with business units and the Group Cybersecurity Team during threat response or mitigation efforts.
• Provide advisory support on secure configuration, patch management, and data protection practices.

Qualification

• Fluent in English and Bahasa Indonesia, both written and spoken.
• Minimum Bachelor's Degree in Cybersecurity, Computer Science, Information Technology, or related discipline with GPA 3.0 above.
• Minimum 2 years experience in IT Security Operations, Network Security, or Incident Response.
• Excellent communication, strong analytical and problem‑solving skills with high attention to detail.
• Proven hands‑on experience with firewalls, SIEM tools, EDR/XDR platforms, network monitoring systems.
• Strong understanding of security frameworks (NIST, ISO 27001, CIS Controls).
• Proficiency in network protocols, threat analysis, intrusion detection, endpoint protection.
• Experience with vulnerability management, patching processes, log correlation.
• Professional certifications such as CompTIA Security+, CEH, CISM, CISSP, ISO 27001 are highly advantageous.

General Qualifications

• Expertise in implementing cybersecurity frameworks such
• Successful delivery of services to organizations of similar size and complexity.
• Proven ability to mentor and train internal teams.
• Familiarity with regulatory requirements and compliance standards.
• Familiarity with security standards and frameworks.

Soft Skill

• Strong verbal and written communication skills (especially for explaining risks to non-technical stakeholders). Indonesian & English.
• Excellent problem-solving and critical thinking abilities.
• High degree of integrity, responsibility, and attention to detail.
• Able to work independently and collaboratively in a team.

Scope of Work

Phase 1 : Immediate Security Enhancements

• Launch CSIRT/IRT operation in collaboration with SOC Team to identify incident reported by SOC and take necessary action to resolve and protect environment.
• Develop a documented IRP (Incident Response Plan) to detect, respond to, and recover from incidents. Conduct tabletop exercises to test the IRP under real-world scenarios.
• Provide a detailed security assessment report with actionable recommendations for improvements.

Phase 2 : Long-Term Cybersecurity Program Initiation

• Conduct a comprehensive security assessment including servers, endpoints, and cloud platforms working with SOC vendors that deliver vulnerability assessment as part of their SOC scope. Identify and remediate critical vulnerabilities such as misconfigurations, patching issues, and access control gaps in collaboration with relative vendors as the executor of necessary actions (e.g., Fortigate firewall check, Bluecat DHCP check, AWS vulnerability check, etc).
• Create and formalize strong IT security policies for access control, incident response, data protection, and compliance alignment.
• Evaluate, configure, and optimize security tools such as firewalls, SIEM, endpoint protection, vulnerability scanners, and DLP solutions. Establish Computer Security Incident Response Team aligned with SOC implementation.
• Ensure adherence to relevant regulatory requirements and prepare audit-ready documentation, providing evidence of compliance with certifications, reports, or assessments. Establish security rules such as approval and review process for cloud usage, ensuring users comply with established rules through training and clear guidelines, and implementing detection to identify and address non-compliant activities.
• Create planning for next year security program to be conducted.

Phase 3 (Next Step) : Continuous Maintenance and Optimization

• Execute annual security program plan and control the progress.
• Perform periodic vulnerability assessments and penetration testing.
• Regularly update and patch systems, applications, and tools to address newly discovered vulnerabilities.
• Monitor the performance of deployed security tools and optimize their configurations.
• Implement real-time threat detection using SIEM and other monitoring tools.
• Conduct regular incident response drills and provide post-incident analysis and recommendations.
• Regularly reassess IT security practices to ensure alignment with evolving regulatory requirements.
• Maintain security documentation (Policy, Procedure, Guideline, etc).
• Maintain audit-ready documentation, including risk assessments, incident logs, and compliance reports.

Be The First To Know

About the latest Security manager Jobsin Indonesia !

Set Email Alert:

Job title

Location

What Locations Can I Find These Jobs In?