Skill diminta
AccurateAuditingCommunicationEnglish
Deskripsi
Tanggung Jawab
- Conduct regular risk assessments to identify and evaluate potential risks associated with IT processes, systems
- and data;
- Develop and maintain a compliance framework, and conduct audits and assessments of compliance with
- established standards;
- Develop and update IT policies, procedures, and forms;
- Design and implement controls and security measures to mitigate identified risks;
- Provide training and awareness programs on IT security and compliance policies; and
- Maintaining accurate and up-to-date documentation related to IT governance, risk, and compliance activities.
Kualifikasi
- Minimum total work experience >= 3 years
- Total work experience in the same position/field >= 1 year
- In-depth understanding of the ISO 27001 IT risk management framework (e.g., ISO 27001, ISO 31000, NIST, or equivalent).
- Knowledge of policies and procedures related to information security, IT risk control, and compliance with relevant regulations (including regulations from the Financial Services Authority).
- Experience in implementing IT policies, internal controls, and auditing related to IT systems.
- Skills in developing policies and procedures relevant to IT Governance and ensuring their effective implementation throughout the organization.
- Analytical and strategic thinking skills to effectively identify and manage information technology risks.
- Good communication skills in Indonesian and English (verbal and written).
- High integrity, detail-oriented, and focused