Information Security Dept. Head

General Responsibilities:

1. Taking anticipatory, adaptive, and proactive actions against cyber threats in order to contribute to maintaining the Bank's business continuity.
2. Managing the conditions of maintaining confidentiality, integrity, and availability of information and/or information systems that are interconnected with each other through cyber media, from cyber attacks. Cybersecurity can also include other aspects, such as authenticity, accountability, non-repudiation, and reliability
3. Creating a secure system architecture for new projects in banking
4. Responsible for designing and recommending security to protect the system, either in the form of software, hardware, or new operational procedures that are in accordance with banking.
5. Have initiatives in banking data protection.
6. Establish a comprehensive cybersecurity strategy and framework that covers all aspects of bank operations
7. Coordinating and/or implementing:
        a.    Bank cyber resilience process
        b.    Self-assessment of inherent risks related to cybersecurity
        c.    Self-assessment of cybersecurity maturity level
        d.    Determination of the level of risk related to cybersecurity
6.Cybersecurity testingResponsible for and managing the IT security team identifying assets, threats, and vulnerabilities and notifying relevant divisions for asset protection mitigation
7. Coordinating the Cyber Incident Response Team, including the initiation of its formation
8. Develop a program to improve the culture of KKS (Confidentiality, Security and Stability) in the form of:
    a.    Awareness
    b.    Training
    c.            education
9. Responsible and manage a team to monitor and detect all cyberattacks
10. Convey security-related issues to management and all members of the company
11. Build and develop a competent IT security team
12. Monitor and ensure compliance with applicable cybersecurity regulations from both OJK and regulators
13. Build a strong cybersecurity culture across the organization

Requirements:

• Candidate should possess at least Bachelor degree (S1) in IT

• Minimum 7 (seven) years of working experience in Banking as IT Security, with experience to lead subordinates

• Experienced in developing and implementing new security systems, security programs, protocols and maintenance of existing systems

• Deep knowledge of data communications and network experience of operating systems and tools

• Have knowledge of information security solutions, including data loss prevention, intrusion detection and prevention, network security monitoring and vulnerability management

• Strong leadership skill

• Proficient in English both written and verbal

• Preferably have Risk Management certification

• Communicative and able to work both individually or together in a team

• Detail-oriented, discipline, and strong integrity person

• Able to work in a fast-paced environment with tight deadline(s)