Information Security Senior

- Make and conduct internal regulations which regards to security or regards to SBV regulation request;
- Ensure all Information Security Policy documents definition and Management of Information Security Risk Register;
- Responsible for defining/implementing security frameworks for existing and new systems. (application review, penetration test and vulnerability assessment);
- Risk Assessment and Risk Treatment to be reviewed on a regular interval along with the Risk coordinators and risk owners;
- Management Reporting on Information Security Projects and Risk Remediation Status;
- Coordinate with IT System throughout Project implementation phase;
- Oversee risk repository ensuring all risk are properly monitored and recorded;
- Make The Third Party Security Assessment;
- The Assessment of the Security controls during the vendor empanelment;
- Internal/External Information Security audit to be completed and coordinated;
- Coordinate the development and delivery of an education and training program on information security and privacy matters for employees, partners and vendors.
- Other tasks assigned by Manager and BOD

- Bachelors in Information Technology (or equivalent);
- 4-5 years of relevant experience;
- Have experience in IT department of Bank or Financial Institute;
- Ability to make internal regulation;
- Professional certifications: any of the CEH/CISA/CSIM/CISSP certification;
- Good knowledge and hands on experience on information security implementation both at Infrastructure and Application level;
- Good written and verbal communication skills and Stakeholder management ability;
- Ability to speak in both business and information security;
- Good English communication;
- Enthusiastic, honor in working.