Third Party Security Review

Permata Bank; Tangerang Selatan; Sur place; IDR 240 000 000 - 420 000 000; Plein temps

Résumé du poste

Permata Bank is seeking an Information Security professional focused on third-party risk management. The role involves assessing cybersecurity risks of external vendors, evaluating controls, and ensuring regulatory compliance across partnerships.

Candidates should have at least 3 years in information security or IT risk, a Bachelor's degree, and strong communication skills to engage with external parties and drive remediation efforts within a major Indonesian banking group.

Qualifications

• Bachelor's degree is required.
• Minimum of 3 years of work experience in information security or related fields.
• Knowledge of information security risk management and frameworks is expected.

Responsabilités

• Conduct comprehensive cybersecurity risk assessments of third parties.
• Evaluate operational effectiveness of third-party cybersecurity controls.
• Monitor remediation plans for identified security gaps and reassess periodically.
• Prepare third-party risk reports for the bank and stakeholders.
• Define information security risk management requirements for vendors and dependencies.
• Communicate effectively with third parties and explain risk concepts.
• Propose automation solutions to improve risk management processes.

Connaissances

Third-party risk management

InfoSec frameworks

IT audit

Formation

Bachelor's degree

Description du poste

We are one of the top 10 biggest banks in terms of assets in Indonesia and listed in the Indonesia Stock Exchange. Permata Bank is a KBMI 3 with a strong core capital of nearly 50 trillion rupiahs. We believe that our employees are our greatest asset, and we are deeply committed to creating an environment where they can Learn, Grow, and Make a difference. This commitment is reflected in the recognition we've received-HR Excellent Award 2024 in the Learning Development and Knowledge Management categories. In addition, we achieve a net profit of over 2 trillions rupiahs in 2024, further solidifying our position as a leading financial institution.

Why PermataBank ?

Here at PermataBank, you will Learn, Grow, and Make A Difference

You will have the appetite and the ability to learn many things, challenged to grow beyond ways you can imagine, and see the incredible difference you would have made along the journey.

This is our platform for you. We cannot promise a smooth ride, but rest assured, it is going to be a meaningful journey!

• Learn : We always think innovatively to improve the way we work, making it easier, better and faster.
• Grow : We provide excellent service to customers and encourage excellent performance in our daily work.
• Make a difference : We understand each other and together build strong relationships with internal and external parties based on mutual respect.

Job Description :

• Conduct comprehensive cybersecurity risk assessments of third parties
• Evaluate the operational effectiveness of third-party cybersecurity controls
• Monitor remediation plans for identified security gaps
• Perform periodic reassessments
• Compile risk findings into clear, easily understandable reports
• Prepare third-party risk reports for the bank
• Define Information Security risk management requirements for both new and existing third-party service vendors and external dependencies
• Ability to explain and assess inherent risk, residual risk, and impacts on business and regulatory compliance
• Ability to communicate effectively and appropriately with third parties
• Ability to provide automation solutions

Job Qualifications :

• Bachelor's degree required
• Minimum of 3 years of work experience in information security, third-party risk management, IT audit, or IT risk
• Possess practical technical knowledge of Information security risk management, Information security technology solutions, and information security frameworks and/or best practices

Directorates:

Technology

PT Bank Permata Tbk hereby informs that the company does not impose any charges in the employee recruitment process.