Third Party Security Review

Permata Bank; Tangerang Selatan; On-site; IDR 350,000,000 - 550,000,000; Full time

Job summary

Permata Bank is seeking a knowledgeable cybersecurity risk professional to conduct third-party risk assessments and evaluate controls. The role focuses on effective risk reporting and remediation coordination with external vendors.

Incumbent will define risk requirements, assess inherent and residual risks, and communicate findings to stakeholders while supporting automation of risk processes.

Qualifications

• Bachelor's degree required.
• Minimum of 3 years of experience in information security, third-party risk management, IT audit, or IT risk.
• Practical knowledge of information security risk management, technology solutions, and risk frameworks/best practices.

Responsibilities

• Conduct comprehensive cybersecurity risk assessments of third parties.
• Evaluate the operational effectiveness of third-party cybersecurity controls.
• Monitor remediation plans for identified security gaps.
• Perform periodic reassessments.
• Compile risk findings into clear, understandable reports.
• Prepare third-party risk reports for the bank.
• Define information security risk management requirements for vendors and external dependencies.
• Explain and assess inherent risk, residual risk, and impacts on business and regulatory compliance.
• Communicate effectively with third parties and provide automation solutions.

Skills

Information security

Risk management

Third-party risk

Communication

Automation

Education

Bachelor's degree

Job description

Company Description :

We are one of the top 10 biggest banks in terms of assets in Indonesia and listed in the Indonesia Stock Exchange. Permata Bank is a KBMI 3 with a strong core capital of nearly 50 trillion rupiahs. We believe that our employees are our greatest asset, and we are deeply committed to creating an environment where they can Learn, Grow, and Make a difference. This commitment is reflected in the recognition we've received-HR Excellent Award 2024 in the Learning Development and Knowledge Management categories. In addition, we achieve a net profit of over 2 trillions rupiahs in 2024, further solidifying our position as a leading financial institution.

Why PermataBank ?

Here at PermataBank, you will Learn, Grow, and Make A Difference

You will have the appetite and the ability to learn many things, challenged to grow beyond ways you can imagine, and see the incredible difference you would have made along the journey.

This is our platform for you. We cannot promise a smooth ride, but rest assured, it is going to be a meaningful journey!

• Learn : We always think innovatively to improve the way we work, making it easier, better and faster.
• Grow : We provide excellent service to customers and encourage excellent performance in our daily work.
• Make a difference : We understand each other and together build strong relationships with internal and external parties based on mutual respect.

Job Description :

• Conduct comprehensive cybersecurity risk assessments of third parties
• Evaluate the operational effectiveness of third-party cybersecurity controls
• Monitor remediation plans for identified security gaps
• Perform periodic reassessments
• Compile risk findings into clear, easily understandable reports
• Prepare third-party risk reports for the bank
• Define Information Security risk management requirements for both new and existing third-party service vendors and external dependencies
• Ability to explain and assess inherent risk, residual risk, and impacts on business and regulatory compliance
• Ability to communicate effectively and appropriately with third parties
• Ability to provide automation solutions

Job Qualifications :

• Bachelor's degree required
• Minimum of 3 years of work experience in information security, third-party risk management, IT audit, or IT risk
• Possess practical technical knowledge of Information security risk management, Information security technology solutions, and information security frameworks and/or best practices

Directorates:

Technology

PT Bank Permata Tbk hereby informs that the company does not impose any charges in the employee recruitment process.