Information Risk Assurance Specialist

Job Purposed

Information Risk Assurance Department is responsible to manage the risk related to security of information emerging from the extensive use of information technology following the Bank’s digitalization strategy

Responsibilities

• Developing a clear baseline for the Bank in implementing the Infosec which documented in a Policy, Framework, as well as other documents within the domain of Infosec and by considering the Regulatory requirements
• Maintain communication and relationship between Infosec & IT Risk with other units especially with IT Risk, IT unit, Audit Unit, Subsidiaries and others unit that have direct relationship with Infosec & IT Risk
• Performing a regular update to the Policy, Framework, as well as other documents within the domain of Infosec to be able to accomodate any change as well as new threats and vulnerabilities
• Perform monitoring and evaluation to ensure all projects, which have been agreed, can be implemented as budgeted and within the timeframe
• Actively observe and assess the existing process within internal division to be able to prvide recommendation and/ or plan an initiative of improvement
• Conduct training and socialization to increase awareness and risk culture, in the context of Infosec, to all units (through socialization, email blast, training, etc.)
• Perform monitoring and evaluation to the implementation of recoomendation communicated through Risk Review document
• Perform observation and assessment to the existing condition in the context of Information Security implementatation within the Bank and providing recommendation to area of improvement based on the agreed Policy, Framework and Guidelines

Qualifications

• Exposure or experience in the technical fields : IT System Infrastructure and Network, IT Security Operations (min. 5 years experienced)
• Communication and persuasive presentation skills (Indonesian and English)
• Professional certification e.g. CISA/ COBIT/ CISM/ CISSP/ CRMP/ CGEIT, CCISO, and other techical certification
• Experience in the Information Technology auditing is a valuable point and required in the decisión making for risk assessment activity
• Having good communication (written & verbal) and presentation skill (in Bahasa and English)
• Experience in the risk taking unit (RTU) in managing IT Govenance, IT Compliance, and/ or other technical operations functions Will be required in giving practial análisis and recommendation
• Work in the banking sector and/or other financial institutions (min. 11 years experienced in IT Governance, Risk, Compliance, Risk Management Methodology, Information Security Risk Management, IT Auditing)
• Able to collaborate and become partners for various teams
• Give the team the opportunity to learn new things
• Minimum of Bachelor Degree (S-1)