Lowongan Kerja Jakarta Selatan Posisi It Governance, Risk & Compliance di MSIG Life Insurance Indonesia Tbk

1. Implement and maintain the ISMS Program to ensure information security governance and compliance for Sinarmas MSIG. This includes creating new or leading the maintenance of existing security and privacy policies, procedures, standards, and specifications to ensure they are updated and appropriately aligned with applicable laws, regulations, and the evolution of security risks.
2. Collaborate with other relevant departments to ensure alignment and compliance of policies, standards, and specifications across the enterprise. This includes managing the information security exception process from the assessment, tracking, following up and providing alternative mitigating action items.
3. Implement and maintain incident response processes for the company. The process then will be executed and conducted by the security operation team including providing root cause analysis and timely resolution according to the applicable laws and regulations.
4. Implement and maintain the information security risk management processes. This includes the assessment of information security risk across departments, systems, services, and third parties. Lead and track the progress of the information security risk treatment plan and ensure that all updates are documented in the risk register.
5. Conduct information security awareness and compliance training programs.
6. Keep being updated with new technologies and best practices related to information security discipline as well as applicable state, industry, and regulatory compliance. Involve in various external professional organizations as appropriate.
7. Support vendor due-diligence process and help to lead and define overall third party risk management efforts.
8. Support internal and external audit process for relevant compliance concerns including SOX, GDPR, etc
9. Participate in disaster recovery and business continuity planning.
10. Perform business impact analysis and assist with development of IT/InfoSec risk register.

Qualifications:

1. Bachelor Degree from IT
2. Having 3 – 5 years of experience in IT security or information security related field, preferably in Governance, Risk, and Compliance related experience.
3. Excellent communication and analytical skill
4. Fluent in English