Information Security and System Risk Controller Staff
Summary
IT risk and information security staff role at an Indonesian bank: identify and control IT risks, develop security frameworks and policies, monitor systems/BCP/e-banking/vendors, follow up on audit findings, and enforce usage policies. Requires ISO 27001/NIST, cybersecurity, IAM, DLP and network security knowledge.
Job Description:
Identify, assess, monitor, and control Information Technology (IT) risks across the Bank.
Develop and enhance IT Risk Management and Information Security frameworks, policies, and procedures.
Monitor and evaluate the effectiveness of IT-related processes, including system development, communication networks, information security, Business Continuity Planning (BCP), End User Computing (EUC), electronic banking services, and third-party IT service utilization.
Coordinate with and provide guidance to system controllers across Head Office departments, branches, and sub-branches, and prepare recommendations and reports for continuous improvement to Management and the Board of Directors.
Monitor and follow up on action plans arising from internal and external audit findings related to Information Technology to ensure timely resolution.
Monitor IT projects, user requests, and vendor-related activities to ensure proper governance and implementation.
Monitor and enforce compliance with internet and email usage policies, including controls over password-protected email attachments and information security requirements.
Requirements:
Minimum Bachelor's Degree in IT, Information Systems, Computer Science, or related field.
Minimum 3 years of experience in Information Security, IT Risk Management, or related functions, preferably in banking.
Good understanding of ISO 27001, NIST, cybersecurity, IAM, DLP, and network security controls.
Strong analytical, communication, and problem-solving skills.
Knowledge of banking regulations related to Information Security and IT.