Security Governance Specialist 1225
CIMB Niaga · Tangerang Selatan
Sekilas tentang pekerjaan ini
CIMB Niaga membuka posisi Security Governance Specialist tingkat senior di Tangerang Selatan. Peran ini menangani tata kelola keamanan informasi, termasuk kebijakan, pengujian kontrol dan risiko, pelaporan, serta ketahanan siber.
Tugas utama
- Mengembangkan dan memelihara kebijakan, standar, SOP, serta baseline keamanan informasi.
- Menganalisis risiko pengecualian keamanan dan merekomendasikan kontrol kompensasi.
- Menjalankan RCSA, pengujian efektivitas kontrol, dan tindak lanjut kelemahan.
- Menyiapkan tanggapan atas temuan audit dan laporan keamanan informasi berkala.
- Merancang latihan siber dan mengoordinasikan simulasi manajemen krisis siber.
Ringkasan ini dibuat dengan AI dari deskripsi di bawah. Yang berlaku adalah deskripsi lengkapnya di situs CIMB Niaga.
Deskripsi pekerjaan
Job Summary
Senior expert in information security governance, covering policy and standards, risk and control testing, reporting, and cyber resilience. Handles the most complex governance cases and prepares decision recommendations for the Lead.
Key Responsibilities
- Develop and maintain information security policies, standards, SOPs, and security baselines
- Analyze the risk of security exception requests and recommend compensating controls
- Conduct Risk Control Self Assessment (RCSA) and drive remediation of control weaknesses (CIM)
- Design and execute the Control Effectiveness Testing (CET) and QA testing program
- Prepare responses to internal audit, external audit, and regulatory findings
- Prepare periodic information security reports (KRI, RAS, LEM)
- Design and coordinate cyber drills and cyber crisis management exercises
People Development
- Review KPI achievement with the line manager
- Pursue continuous self-development and maintain professional certifications
- Act as subject matter expert (SME) and mentor junior team members
Regulatory Compliance
- Perform work in line with internal policies and regulatory requirements
- Apply and document governance and risk management in own work