Information Security Policy Specialist
Golden Agri-Resources (SMART) · DKI Jakarta
Sekilas tentang pekerjaan ini
Golden Agri-Resources (SMART) mencari Information Security Policy Specialist di DKI Jakarta. Posisi ini bertanggung jawab mengembangkan dan mengelola kerangka kebijakan keamanan informasi, memastikan keselarasan dengan standar dan persyaratan regulasi, serta mendukung tata kelola keamanan siber.
Tugas utama
- Mengembangkan dan memelihara kebijakan, standar, prosedur, serta panduan keamanan informasi.
- Menyeragamkan dokumentasi keamanan di seluruh organisasi.
- Berkolaborasi dengan tim Cybersecurity, IT, Risk, Compliance, dan Legal untuk memvalidasi kontrol keamanan.
- Mengelola tata kelola kebijakan, repositori, siklus peninjauan, dan kesiapan audit.
- Mendorong penerapan kebijakan serta mengidentifikasi kesenjangan untuk perbaikan berkelanjutan.
Kualifikasi utama
- Gelar sarjana di bidang Information Security, Cybersecurity, Information Technology, atau bidang terkait.
- Pengalaman 3–7 tahun di GRC, tata kelola keamanan informasi, atau pengembangan kebijakan keamanan.
- Berpengalaman mengembangkan dan memelihara kebijakan, standar, serta prosedur keamanan informasi.
- Memahami ISO 27001/27002, NIST CSF, CIS Controls, dan berbagai domain keamanan siber.
- Memiliki kemampuan menulis teknis, dokumentasi, analisis, dan pengelolaan pemangku kepentingan yang kuat.
Ringkasan ini dibuat dengan AI dari deskripsi di bawah. Yang berlaku adalah deskripsi lengkapnya di situs Golden Agri-Resources (SMART).
Deskripsi pekerjaan
Job Description Summary
The Information Security Policy Specialist is responsible for developing, standardizing, and maintaining comprehensive information security policies, standards, and procedures across all cybersecurity domains. This role ensures consistent governance, eliminates outdated or fragmented documentation, and drives alignment with regulatory requirements, industry best practices, and organizational security objectives.
The specialist acts as a key contributor in establishing a unified, structured, and scalable policy framework to support effective cybersecurity governance and operational consistency.
Job Description
- Develop, review, and maintain information security policies, standards, procedures, and guidelines.
- ·Standardize and consolidate security documentation to ensure consistency across the organization.
- Collaborate with Cybersecurity, IT, Risk, Compliance, and Legal teams to define and validate security controls.
- Ensure policies align with industry standards and frameworks such as ISO 27001/27002, NIST CSF, and CIS Controls.
- Support policy governance processes, including version control, review cycles, approvals, and audit readiness.
- Maintain a centralized policy repository and ensure documentation remains current with regulatory and business requirements.
- Promote awareness and adoption of information security policies through communication and training initiatives.
- Identify policy gaps and recommend continuous improvements to strengthen governance and compliance.
Job Requirements
- Bachelor's degree in Information Security, Cybersecurity, Information Technology, or a related field.
- 3–7 years of experience in Information Security Governance, Risk & Compliance (GRC), or security policy development.
- Experience in developing and maintaining information security policies, standards, and procedures.
- Good understanding of cybersecurity domains, including IAM, Network Security, Cloud Security, Endpoint Security, and Data Protection.
- Familiar with security frameworks and standards such as ISO 27001/27002, NIST CSF, and CIS Controls.
- Strong technical writing, documentation, analytical, and stakeholder management skills.
- Ability to translate technical security requirements into clear and practical policies.
- Professional certifications such as CISA or CISM are an advantage.
"Our company has never levied any fees for the recruitment process nor has it required to order tickets and accommodation through a certain travel agent or certain person"