IT Security Risk & Governance Specialist - GRC & Cybersecurity

Join Bussan Auto Finance as an IT Security Risk & Governance Specialist and play a pivotal role in safeguarding our digital infrastructure. This position focuses on end-to-end IT Governance, Risk, and Compliance (GRC), including Cybersecurity and Data Privacy. Based in Jakarta Selatan, you'll be part of a dynamic team driving Bussan Auto Finance's digital transformation. Daily, you'll analyze risks, implement security policies, and ensure compliance with industry regulations.

As an IT Security Risk & Governance Specialist, you'll be responsible for identifying and mitigating risks across our IT environment. You'll work closely with our IT team to develop and maintain a robust GRC framework, ensuring our systems are secure and compliant. This role offers a unique opportunity to shape Bussan Auto Finance's cybersecurity strategy and contribute to our growth in the automotive finance sector.

📋 Tanggung Jawab Pekerjaan

• Develop and maintain a comprehensive GRC framework to manage IT risks and ensure compliance.
• Conduct regular risk assessments and vulnerability scans using tools like Nessus and OpenVAS.
• Implement and monitor security policies, procedures, and controls to protect Bussan Auto Finance's digital assets.
• Ensure compliance with industry regulations such as ISO 27001, GDPR, and PCI DSS.
• Lead incident response and crisis management activities to mitigate the impact of security breaches.
• Provide training and awareness programs to educate employees on cybersecurity best practices.
• Collaborate with the IT team to integrate security measures into new projects and initiatives.
• Stay updated with the latest cybersecurity trends and technologies to proactively address emerging threats.

🎓 Kualifikasi & Syarat

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• Minimum of 5 years of experience in IT Security, Risk Management, or a similar role.
• Certifications such as CISM, CISA, CRISC, or CISSP are highly desirable.
• Strong understanding of GRC frameworks and experience with tools like RSA Archer, Metasploit, and Burp Suite.
• Proven track record of managing and mitigating IT risks in a complex environment.
• Excellent communication and interpersonal skills to work effectively with cross-functional teams.
• Ability to work independently and manage multiple priorities in a fast-paced environment.
• Strong problem-solving skills and attention to detail.

🛠️ Keahlian

Lowongan Terkait