Analyst It Resilience, Security And Sustainability (Industrial Control System)

About the role

To protect company network, IT systems, and Industrial Control System from cyber-attacks, to manage day to day IT security operation, to create and maintain cybersecurity and industrial control system security policies and practices, and to serve as Subject Matter Expert on Industrial Control System information security-related projects and initiatives assigned.

Your key accountabilities include among others are:

• To conduct regular vulnerability assessments and penetration test.
• To monitor and address events and alerts across various security platforms.
• To provide IT security consultancy to various users and projects especially related to industrial control system.
• To research security trends, new methods, and techniques to eliminate the possibility of system breaches.
• To assess security controls and evaluate the security posture of organizational internal controls.
• To handle all security-related tickets and follow through until resolution
• To provide operational support for all Information security tool and maintenance.
• To perform first and second level incidence response and computer forensic activities.

Applicants must possess the following requirement:

• Minimum of 5 years of control systems security background with relevant previous experience in a technical or consulting environment.
• Good analytical, problem-solving skills and detail oriented.
• Good written and verbal communication skills both in Indonesian and English.
• Comprehensive working knowledge of one or more of the following: IEC 62443/ISA 99, ISO/IEC 27001:2013, NIST SP 800-82, CPNI Good Practice.
• Experience supporting and troubleshooting industrial protocols such as OPC, Modbus TCP, HART, or Foundation Fieldbus.
• Experience with the functionality, operation, and maintenance of firewalls and various forms of endpoint security.
• Minimum Bachelor’s Degree in Computer Science/Information Technology or other related field
• Proactive and able to work independently and meet tight reporting deadlines.
• Experience with ICS systems and ICS security industry practices with exposure to Operational Technologies such as PLC, DCS, SIS, HMI, or SCADA systems.
• Experience with cyber defense systems and response to cyberattacks such as log and network traffic analysis, malware infections, digital forensics, and malicious activity investigations.