Senior Subject Matter Expert - Cybersecurity

Lintasarta; Jakarta Pusat; On-site; IDR 180,000,000 - 300,000,000; Full time

Job summary

Lintasarta is seeking an experienced Application Security professional to guide secure-by-design architecture, manage vulnerability programs, and ensure data protection across banking-sector projects. The role requires 3–5+ years of relevant experience and formal education (D3/S1 or equivalent).

Strong industry certifications and familiarity with BTN regulations are preferred. The position includes executive reporting duties and collaboration with dev teams and business units to ensure security

Qualifications

• 3–5+ years of experience in relevant field.
• Min. D3/S1 or equivalent.
• Intermediate–advanced certifications: CISSP, CISM, CEH, CompTIA Security+/CySA+, CDPSE, and/or ISO 27001 Implementer
• Understanding of banking regulations & relevant laws (BTN context)
• Knowledge of industry best practices in scope
• Prior experience in banking or financial services industry

Responsibilities

• Provide strategic guidance on secure-by-design application security architecture across all SDLC stages
• Review pentest & source code review findings and give advanced mitigation recommendations for strategic bank projects
• Serve as lead consultant for dev teams & business units on app security risk prior to production
• Design vulnerability management strategy across bank infrastructure and applications
• Review pentest/VA/security audit findings and validate remediation plan effectiveness
• Direct data protection policy: data classification, in-transit/at-rest encryption, and Data Loss Prevention (DLP)
• Oversee alignment of data protection technology implementation with data privacy regulations in the banking and finance sector
• Provide advanced consultation on secure data governance strategy to support data-driven digital banking initiatives
• Support clients & crisis management teams during major cyber security incidents
• Guide technical teams in root cause analysis to prevent recurrence
• Prepare & present monthly/quarterly security reports, plus daily/weekly/monthly activity reports

Skills

3-5+ years experience

Education

D3/S1 or equivalent

Job description

Application Security & Security Advisory

• Provide strategic guidance on secure-by-design application security architecture across all SDLC stages
• Review pentest & source code review findings and give advanced mitigation recommendations for strategic bank projects
• Serve as lead consultant for dev teams & business units on app security risk (new & existing systems) prior to production

Vulnerability Management & Security Compliance

• Design vulnerability management strategy, methodology & framework across all bank infrastructure and applications
• Review pentest/VA/security audit findings and validate remediation plan effectiveness

Data Security & Protection

• Direct data protection policy: data classification, in-transit/at-rest encryption, and Data Loss Prevention (DLP)
• Oversee alignment of data protection technology implementation with data privacy regulations in the banking and finance sector
• Provide advanced consultation on secure data governance strategy to support data-driven digital banking initiatives
• Support clients & crisis management teams during major cyber security incidents
• Guide technical teams in root cause analysis to prevent recurrence

Executive Reporting

• Prepare & present monthly/quarterly security reports, plus daily/weekly/monthly activity reports

Qualifications:

• 3–5+ years' experience in relevant field
• Min. D3/S1 or equivalent
• Intermediate–advanced certification: CISSP, CISM, CEH, CompTIA Security+/CySA+, CDPSE, and/or ISO 27001 Implementer
• Understanding of banking regulations & relevant laws (BTN context)
• Knowledge of industry best practices in scope
• Prior experience in banking or financial services industry