Deskripsi pekerjaan
Stockbit / Bibit membuka kesempatan bagi profesional IT Security – Governance, Risk & Compliance (GRC) untuk memperkuat tata kelola keamanan, manajemen risiko, serta praktik kepatuhan di lingkungan perusahaan fintech yang berkembang pesat. Anda akan berkolaborasi erat dengan tim Teknologi, Keamanan, Risiko, Kepatuhan, dan bisnis. Tanggung jawab Anda meliputi pengelolaan identifikasi risiko siber, pemenuhan standar regulasi dan audit keamanan, pengembangan kebijakan keamanan informasi, serta koordinasi penilaian risiko keamanan pihak ketiga. Peran ini juga mencakup tata kelola perlindungan data, pelaksanaan program kesadaran keamanan, serta penanganan insiden siber untuk memastikan ketahanan teknologi perusahaan secara menyeluruh.
Tanggung jawab: Manage cyber risk identification, assessment, remediation tracking, and risk acceptance processes; Ensure security compliance with regulatory requirements, internal/external audits, and applicable security standards; Develop and maintain security policies, standards, controls, and control ownership frameworks; Coordinate security audits, including evidence collection, finding management, and remediation tracking; Establish and manage Third-Party / Vendor Security Risk Assessment processes; Support data protection governance, including data classification, handling, and protection requirements; Establish governance around access reviews, privileged access, and access control requirements; Drive security awareness initiatives, including security training and phishing simulations; Support business continuity, disaster recovery, and cyber resilience governance; Manage security exceptions, compensating controls, and formal risk acceptance; Support security incident handling, including incident coordination, documentation, post-incident review, and tracking of remediation actions; Manage security dashboards and management reporting covering security posture, risk, compliance, initiatives, and security maturity.
Kualifikasi: 3–5 years of experience in IT Security, GRC, Cybersecurity, IT Audit, Risk Management, or related areas.
Tanggung jawab
- Manage cyber risk identification, assessment, remediation tracking, and risk acceptance processes
- Ensure security compliance with regulatory requirements, internal/external audits, and applicable security standards
- Develop and maintain security policies, standards, controls, and control ownership frameworks
- Coordinate security audits, including evidence collection, finding management, and remediation tracking
- Establish and manage Third-Party / Vendor Security Risk Assessment processes
- Support data protection governance, including data classification, handling, and protection requirements
- Establish governance around access reviews, privileged access, and access control requirements
- Drive security awareness initiatives, including security training and phishing simulations
- Support business continuity, disaster recovery, and cyber resilience governance
- Manage security exceptions, compensating controls, and formal risk acceptance
- Support security incident handling, including incident coordination, documentation, post-incident review, and tracking of remediation actions
- Manage security dashboards and management reporting covering security posture, risk, compliance, initiatives, and security maturity
Kualifikasi
- 3–5 years of experience in IT Security, GRC, Cybersecurity, IT Audit, Risk Management, or related areas
Informasi lowongan
- Tipe pekerjaan
- Full-time
- Gaji
- Negosiasi