Astra Financial is a brand of the financial services division of PT. Astra International Tbk. Astra Financial manages 12 business entities; Astra Credit Companies, FIFGROUP, Toyota Astra Finance, Komatsu Astra Finance, Surya Artha Nusantara Finance, Asuransi Astra Buana, Astra Life, Astra Ventura, Dana Pensiun Astra, MauCash, AstraPay and Moxa.

Astra Financial is one of Astra’s seven business divisions, in addition to Automotive, Heavy Equipment, Mining, Construction and Energy, Agribusiness, Infrastructure and Logistics, Information Technology, and Property.

With a value proposition in the form of best value, integrated and speed, Astra Financial always prioritizes the “Prudent” principle and applies good governance in running the business in all financial services. Astra Financial has a mission to become a partner for the Indonesian people to maximize their financial potential and enable the community to prosper.

Astra Financial

<ul>
	<li>Melakukan review proposal pembiayaan segmen Korporasi/Commercial</li>
	<li>Melakukan analisa industri bisnis customer</li>
	<li>Memberikan rekomendasi kepada Komite Konsultasi Pembiayaan</li>
	<li>Memberikan training analisa kredit korporasi kepada Business Unit</li>
	<li>Melakukan monitoring kinerja bisnis dan top customer relationship</li>
	<li>Mampu mengembangkan policy terkait kredit</li>
</ul>

Credit & Industry Analyst

Who We Are

We are a System Integration Firm that dedicated ourselves to Cloud Computing Solutions. We establish ICS to answer the future challenges, to provide solutions on how to get to market faster, create new experiences, and build operational muscle for sustainable results. Rising to those challenges, we provide Implementation, Managed Services, Consultancies, for multinational and local enterprises, or startups that are building their path for greater future. We will provide the most effective, cost optimized solution to all of our customers. We will answer every challenge with innovation to transform our client businesses, so they could scale new opportunities and balance the two for a wise pivot for a sustainable business. Our company comprise of engineers that has been in the industry for more than 10 years, we are confident to provide the right and most effective solutions to all of our clients. As a leader in CLOUD solutions and services, ICS helps global enterprises and midsize organizations to increase the efficiency and flexibility of their mission-critical cloud infrastructure and support operations, through a dedicated team of cloud experts.We have done more than 50 migrations during our 3 years of establishments, and more than 100 customers currently. We have done not only migrations, but also SAP Implementation, Magento for e-commerce, and Dev-Ops implementation in many industries. We keep adding more competencies to serve more unique requirements from our customers.

Why us

We are advisors, strategists and engineers focused to emphasize your business. We are born in the cloud. Running in the  business over a decade allow us to have experiences in many industries, shape us to provide the right solutions for all of our customers.

•	Indonesia AWS Advance Partner
Since 2019, we’ve become the first local advance partner in Indonesia. ICS Compute has proven to deliver best practice for cloud computing to the customers, not only from reliability, security, scalability, but also for cost and infra optimization.
•	Certified Cloud Engineer
We certified all of our engineers to give our customers convenience, and to make sure that we can provide and deliver best practice solutions to all of our customers base on their workload.
•	Quality Cloud Infrastructure
By leverage the services from the cloud providers, we provide quality solutions, which include aspects of security, high availability, scalability, reliable and cost optimized.
•	Best Value for Money
We will help our customers in their cloud journey, and it also include by helping them choose the right cloud providers, the right billing method, and do several tips and tricks that can help them to optimize their cloud usages.
•	Rich Feature Solutions
All applications that was created currently already available to implement on Cloud. These movement will create a rich environment in Cloud Computing, from a-z of your requirements will be available on top of Cloud Computing. You don’t have to look elsewhere to find the right and effective features for your company. From Infrastructure as a service, transform your workload to combine platform as a service, software as a service and function as a service, and develop your data analytic by using the cloud services. Technology grows rapidly, providing thousands innovation every year, so modernize your company now and create greater opportunities with our solutions to compete in the market.

Our core values

In ICS, we believe the future will be all digital on top of Cloud. Because we believe Cloud Computing has the scalability, the flexibility and the optimization that will be required by all industries. Simply said, Cloud Computing is a necessities. So, we are obsessively passionate and focus on the curve of technology, following every innovation and optimization that will help our customers to reach their goals. Born in the cloud, we trained all of our Team to follow the curve of technology and innovation. So we could provide the best solution to boost their businesses with the most optimize cost. We are more than happy to assist and helped you in pursuing your dreams through technology and innovation. Let’s Grow Together!


ICS Compute

Design and develop comprehensive security architectures for on-premises, cloud and hybrid

environments.

﻿﻿﻿Recommend, implement, and oversee security tools, such as SIEM, IAM, DLP, and endpoint protection solutions.

﻿﻿﻿Provide guidance on secure system configurations, including firewalls, intrusion detection systems, and encryption protocols.

﻿﻿﻿Define and implement secure architectures for cloud platforms (AWS, GCP, Azure), and Saas applications.

﻿﻿﻿Collaborate with DevOps teams to embed security into CI/CD pipelines and adopt DevSecOps practices.

﻿﻿﻿Ensure adherence to regulatory requirements such as ISO 27001, PCI DSS, GDPR. or local laws.

﻿﻿Review post-incident analyses to improve security architecture and incident response strategies.

﻿﻿﻿Provide mentorship and training to junior security staff and cross-functional teams.

SECURITY ARCHITECT

Universal BPR is a community bank founded in 2003 by Kaman Siboro and Stephen Satyahadi - two individuals with more than 30 years of experience in banking sector. The bank is engaged in the provision of loan, saving and deposit to individuals and SMEs. For lending segment, the current ticket size is ranging from 100 million to 10 billion rupiah per customer.

Universal BPR group currently operates 10 branches located in 8 cities of Indonesia.

Universal BPR is registered and regulated by OJK (financial services authority) and is a member of LPS (deposit insurance)

MISSION STATEMENT
To become a bank that focuses on improving the quality of life of the community with integrity, respect and continuous improvement.

MOTTO
Fast, Safe, Caring

Bank Universal BPR

<ul>
	<li>Develop and update information security policies.</li>
	<li>Carry out compliance assessments of regulations and security standards.</li>
	<li>Identify, assess, and manage IT security risks.</li>
	<li>Carry out training and socialization of security policies for employees.</li>
	<li>Supervise the implementation of security controls and carry out continuous improvement. </li>
</ul>

IT Security

Astra Graphia Information Technology (AGIT) is a Digital Service Provider, provides one stop Solution on Digital Services. Since 1983, AGIT is part of PT Astra International Tbk Group, a conglomeration company in Indonesia that currently has 212 subsidiaries and affiliate companies with 7 line of businesses (automotive, financial services, heavy equipment, agribusiness, information technology, infrastructure & logistics, and property). AGIT itself is owned 100% by PT Astra Graphia Tbk

As a Digital Service Provider, AGIT has transformed its business not only focusing on providing ICT infrastructure and application related services but more towards on what we called as a One-Stop-Solutions on Digital Services, both in on-premise and cloud infrastructure model.

We bring the concept of digitize things (digitize everything), to help and to assist our customers in performing their digital transformation through the implementation on digital technology & digital solutions.

We have four main pillars in our Digital Solution Portfolios that cover the entire journey required to conduct digital transformation starting from Digital Strategy, Digital ICT Foundation, Digital Platform, and Digital Services

PT Astra Graphia Information Technology

<ol style="list-style-type: upper-alpha;">
	<li>IT Security jaringan</li>
</ol>

<ul>
	<li>Menguasai perangkat security jaringan (Firewall, IPS, WAF, dll)</li>
	<li>Kemampuan menganalisa port yang dibutuhkan</li>
	<li>Implementasi patch di perangkat jaringan</li>
	<li>Kemampuan korelasi event dari perangkat security yang ada</li>
	<li>Update dengan perkembangan teknologi security</li>
</ul>

<ol style="list-style-type: upper-alpha;">
	<li>IT Security server</li>
</ol>

<ul>
	<li>Menguasai security server (baseline security configuration, antivirus, firewall server)</li>
	<li>Menguasai patch di OS Windows dan Linux</li>
	<li>Menguasai security terkait Office 365</li>
	<li>Menguasai keamanan email (SMTPS, dll)</li>
	<li>Kemampuan korelasi event dari log di OS</li>
	<li>Update dengan perkembangan teknologi security</li>
</ul>

Jobdesc:

<ol>
	<li>Perform day to day operations for Security Analyst</li>
	<li>Perform monitor, manage, and configure security tools, review incidents to assess their urgency, and escalate incidents if necessary.</li>
	<li>Maintain the highest SLA Standard for Operations and Improvement.</li>
	<li>Fine-tune SIEM rules to reduce false positive and remove false negatives.</li>
	<li>Learn new attack patterns, actively participate in security forums.</li>
</ol>

OCBC Indonesia (formerly known as OCBC NISP) is the fourth oldest bank in Indonesia, which was founded in April 4th 1941 in Bandung under the name of NV Nederlandsch Indische Spaar En Deposito Bank.

OCBC Indonesia then grown to be a solid and dependable bank, especially in providing service for small business segments. It officially became a commercial bank in 1967, Foreign exchange bank in 1990 and public corporate in Indonesia Stock Exchange in 1994.

In the end of 1990, OCBC Indonesia managed to pass the Asia monetary crisis and the fall of banking industry without any recapitalization obligation aid from the government. OCBC Indonesia became one of the first few banks to resume lending during the crisis. This initiative enabled the Bank to note a high growth.

OCBC Indonesia good reputation and its promising growth has attracted the interest of International Finance Corporation (IFC), a part of World Bank Group, which then became a shareholder in 2001-2010 and from OCBC Singapore which then became the shareholder OCBC Indonesia. 

With the support from OCBC Bank-Singapore, OCBC Indonesia has implemented aggressive programmes to strengthen the infrastructure, human resources, information and technology, as well as office networking.

PT Bank OCBC NISP, Tbk is licensed and supervised by the Otoritas Jasa Keuangan (OJK) and is an LPS participant.

PT Bank OCBC NISP, Tbk

Responsibilities:

Yellow Team [Vacancy Closed]

<ul>
	<li>As a Security Architect - Create and enhance security architecture</li>
	<li>Assessing complex IT environments and mapping the data flow of the through systems/applications and organizational functions.</li>
	<li>Architecting and designing cybersecurity solutions for multi-tenant managed security services environment</li>
	<li>Designing shared services / cloud infrastructure environment</li>
	<li>Acting as an expert in cyber defense activities, and building of substantial experience in design, implementation and validation phases for security monitoring projects (SIEM architecture design, IDSP deployment).</li>
	<li>Facilitating architecture sessions to develop enterprise security architecture that fits within clients existing environment.</li>
</ul>

 

Green Team 

<ul>
	<li>Design and Implement Security Solutions: Develop and configure network security architecture, including firewalls, VPNs, and intrusion detection systems.</li>
	<li>Conduct Risk Assessments: Regularly evaluate network security measures and conduct vulnerability assessments to identify weaknesses.</li>
	<li>Documentation and Reporting: Maintain documentation of network security policies, procedures, and incidents, providing detailed reports to management.</li>
</ul>

 

Blue Team (L1 - Shift Working) 

<ul>
	<li>Act as Incident first responder for a 24/7 SOC Operations</li>
	<li>Monitor security sensors and review logs to identify network anomalies or intrusions</li>
	<li>Perform initial analysis of security alerts</li>
	<li>Escalate security incidents using established policies and procedures in a timely manner</li>
</ul>

 

Blue Team (L2 - SOC Analyst) 

<ul>
	<li>Work with stakeholders to analyse potential security incidents, identifying root cause and implement mitigation step(s)/ remedial action(s)</li>
	<li>Perform Response action based on standardize workflow</li>
	<li>Assist with the development of incident response plans, workflows, and SOPs</li>
	<li>Provide threat and vulnerability analysis security advisory services</li>
</ul>

 

Red Team

<ul>
	<li>Deliver Red Team Exercises</li>
	<li>Conduct state-of-the-art penetration testing against web applications, network infrastructures, user workstations, network appliances and other devices and technologies.</li>
	<li>Manual and automated security testing of Web applications, APIs, and Mobile Applications.</li>
	<li>Do code review</li>
	<li>Static and Dynamic testing (SAST &amp; DAST) of thick applications</li>
	<li>Develop Proof-of-Concept (PoC) for the identified vulnerabilities.</li>
	<li>Provide remediation guidance to identified vulnerabilities.</li>
	<li>Develop and execute security testing project plans</li>
</ul>

IT Security Engineer

The Bank was established on 27 April 1971 under the name of PT Bank Pasar Pagi Madju. In line with the change in its status from a retail banking to a commercial bank in 1989, the Bank’s name was changed into PT Bank Bintang Manunggal (Bank Bima). This status change had a positive impact on the Bank’s performance and succeeded in attracting Hana Financial Group to take over the majority of the Bank’s shares. The change in the Shareholders was followed by a change in its name into PT Bank Hana.

In 2013, PT Bank Hana took a strategic action by merging with PT Bank KEB Indonesia to create synergies in the banking business. This business activity caused the Bank to change its name to PT Bank KEB Hana Indonesia or known as Bank KEB Hana. However, in 2020, Bank KEB Hana yet again made a brand change to Hana Bank. By these changes, Hana Bank is increasingly ready to strengthen its competitiveness, both in Indonesia and globally, through the consistency of the brands used by the group.
With the presence of its best people, Hana Bank provides an array of products and services designed to meet various customer needs.

Given its global reach and global standard of service, Hana Bank promises its customers to be their True Hearted Financial Partner.

Hana Bank

<ul>
	<li>Bekerja sama dengan tim pengembangan untuk mengintegrasikan keamanan ke dalam siklus pengembangan perangkat lunak (SDLC) dan memastikan desain, pengembangan, dan penerapan aplikasi yang aman.</li>
	<li>Melakukan tinjauan kode untuk mengidentifikasi dan mengatasi kerentanan keamanan.</li>
	<li>Menerapkan konfigurasi sesuai dengan best practice yang berlaku pada perangkat keamanan yang menjadi tanggung jawab unit Information Security seperti CI/CD platform, Repository Manager, SAST platform.</li>
	<li>Melakukan analisa, tinjauan ulang dan membuat rekomendasi terhadap insiden yang terjadi pada perangkat keamanan yang menjadi tanggung jawab unit Information Security.</li>
</ul>

Information Security Engineer

The transaction is the lungs of the breathing economy, that is why our first step starts with a big dream to pave the way towards freedom of transaction. Since 2007, DOKU has been the first electronic payment system and risk management company in Indonesia. 

From paying and getting paid to transfer funds, all are possible with DOKU. For more than one decade, we have grown together alongside large and medium scaled companies to personal sellers from various lines of business, ranging from transportation, tourism, insurance, retail, donation, communities, and many more. Collaboration with partners such as local and international banks, also non-banking institutions has strengthened our reputation as a trusted local electronic payment solution. 

Our business grows together with our partners’ businesses. Thus we have built a payment ecosystem that is supportive and strengthens theirs. The formation of three product pillars that responds to all business needs across all layers of society has marked our transformation from “The Better Way to Pay” becoming “Think Beyond Payments”. The three winning product pillars comprise Payment Gateway and Transfer Services for Corporate, SMEs, Start-ups, and Local and International MSMEs. The last product pillar, Collaborative Commerce, is designed to empower communities and personal usage.

DOKU, PT NUSA SATU INTI ARTHA

What Will You Do: 

<ol>
	<li>Test application security before deployment</li>
	<li>Test application penetration and also perform ASV scans regularly</li>
	<li>Understand, experience and be able to work within the ISO27001 and PCI-DSS standard framework</li>
	<li>Subscribe or have a source of the latest information about vulnerabilities</li>
	<li>Able to make reports on findings or if there are security anomalies.</li>
	<li>Able to provide technical advice or solutions to the IT team and software developer team</li>
	<li>Follow up on the results of vulnerability findings to the relevant team</li>
	<li>Able to use Security Testing Tools or create your own tools</li>
	<li>Must document all work processes in detail</li>
</ol>

IT Security Officer

NICEpay is an Internet Payment Gateway Provider which brings you a reliable technical support and proven expertise in local system integration, empowering merchant boarding, and maintenance. We are empowering merchant to secure its e-commerce revenue streams from anywhere in the world with our enhanced Fin-Tech solution. We are IT company working with banks and online merchant in delivering Internet Payment Gateway Solution for your e-commerce business.

PT IONPay Networks (NICEPAY)

<ul>
	<li>Responsible for the daily operational of Security, as follow:</li>
	<li>Monitoring Antivirus</li>
	<li>Configure and Monitoring Hiware, IPS system system on DC and DRC</li>
	<li>Check firewall activity on DC and DRC by Cisco Security Manager (CSM) &amp; FortiAnalyzer</li>
	<li>Report and escalated for any activity related daily operational</li>
	<li>Execute action plan Preventive Maintenance time and changes request document</li>
	<li>Support project team related implementation</li>
	<li>Collaborate with other department and vendor related to IT security operation</li>
	<li>Do the vulnerability scan and penetration test for new system/application</li>
</ul>

IT Compliance & Security

Sinergi yang saling menguntungkan
Tahun 2015 menjadi titik balik bagi Bank Mandiri Taspen, dimana Bank Mandiri Taspen memutuskan untuk menjadi bank yang unggul di nasional pada segmen pensiunan dan UMKM, yang diwujudkan dalam program sinergi yang dilaksanakan melalui 2 (dua) kontribusi utama dan benefit, yaitu PT. Bank Mandiri (Persero) Tbk. dan PT. Taspen (Persero).

Visi Bank Mandiri Taspen : Menjadi mitra terbaik dan terpercaya dalam memberdayakan dan mensejahterakan.
Misi Bank Mandiri Taspen :
1. Menciptakan pertumbuhan bisnis dan kesejahteraan melalui produk dan layanan keuangan terbaik
2. Fokus pada kebutuhan UMKM dan Pensiunan dengan menyelaraskan kepentingan ekonomi, sosial dan lingkungan

PT Bank Mandiri Taspen

<ul>
	<li>Melakukan evaluasi risiko keamanan jaringan dan mengidentifikasi kelemahan potensial.</li>
	<li>Menyusun dan mengimplementasikan strategi peningkatan keamanan jaringan.</li>
	<li>Memantau aktivitas jaringan untuk mendeteksi anomali dan potensi ancaman.</li>
	<li>Melakukan penilaian kerentanan dan pengujian penetrasi secara berkala.</li>
	<li>Mengkonfigurasi dan memelihara firewall, sistem deteksi/pencegahan intrusi (IDS/IPS), serta solusi NAC, WAF, dan NDR.</li>
	<li>Menanggapi insiden keamanan dan memastikan pemulihan sistem yang cepat.</li>
	<li>Menjamin bahwa hanya pengguna yang sah memiliki akses ke jaringan.</li>
	<li>Memastikan keamanan data yang ditransmisikan melalui jaringan.</li>
	<li>Merancang strategi pencegahan serangan siber yang proaktif.</li>
</ul>

Network Security Officer

Starting an unincorporated business in 1996, Simbadda Group has been distributing high quality consumer electronics throughout Indonesia. The business unit has started to form a corporate business since 2002.

One of our leading brands is SIMBADDA, which is known by the Indonesian people as a pioneer of speakers, cases and power supplies. We are also involved in the distribution of premium gadget accessories and PC components. Simbadda Group will continue to expand its distribution business to grow in the consumer electronics industry in Indonesia.

Simbadda Group always upholds the value of honesty, among others: honesty of quality,  honesty of cooperation in business and trying to establish cooperation with all partners  throughout Indonesia. 

Currently, Simbadda Group is expanding towards digital transformation that is looking for  enthusiastic, passionate, ambitious individuals to be part of us. 


Simbadda Group

<ul>
	<li>Develop, implement, and maintain IT security policies, procedures, and controls.</li>
	<li>Manage the design, deployment, and maintenance of IT infrastructure including networks, servers, and cloud services.</li>
	<li>Oversee and audit IT user activities to ensure compliance with security policies and prevent misuse</li>
	<li>Implement and enforce Data Loss Prevention (DLP) measures to prevent unauthorized copying, sharing, or leaking of sensitive data by employees.</li>
	<li>Monitor and control API access logs to detect and prevent unauthorized or suspicious activities.</li>
	<li>Lead disaster recovery and business continuity planning for IT systems.</li>
	<li>Collaborate with other departments to align IT infrastructure with business needs.</li>
	<li>Manage and maintain user accounts, including username and password policies to ensure secure authentication.</li>
	<li>Keep up-to-date with the latest cybersecurity threats, trends, and technologies.</li>
</ul>

IT Security & Infrastructure Manager

Sebagai SOC L1 Analyst, melaksanakan fungsi deteksi dini insiden keamanan informasi melalui pemantauan sistem keamanan seperti SIEM dan platform monitoring lainnya secara real-time selama 24x7. Bertugas sebagai garda terdepan (first layer) dalam mengidentifikasi aktivitas mencurigakan, menganalisis alert, mencatat dan mendokumentasikan insiden, serta melakukan eskalasi awal sesuai prosedur. Bekerja sama lintas tim dan memastikan bahwa setiap potensi ancaman mendapat tanggapan cepat, akurat, dan terdokumentasi dengan baik.

Tanggung Jawab:

<ul>
	<li>Melakukan monitoring keamanan informasi secara real-time terhadap SIEM dan platform security monitoring lainnya (misalnya DarkTrace)</li>
	<li>Melakukan triase awal untuk menentukan urgensi dan relevansi alert</li>
	<li>Mencatat, mendokumentasikan, dan membuat laporan terkait insiden keamanan informasi</li>
	<li>Melakukan eskalasi kepada L2 Analyst jika ditemukan indikasi insiden siber</li>
	<li>Menjalankan shift kerja 24x7 (3 shift) sesuai jadwal SOC</li>
	<li>Mendukung proses post-incident review dengan dokumentasi yang lengkap dan akurat</li>
	<li>Berkoordinasi dengan tim lain (IT Ops, Network, Endpoint) untuk validasi dan tindak lanjut</li>
	<li>Menjaga kepatuhan terhadap standar keamanan informasi yang berlaku di bank</li>
	<li>Mengakses dan menganalisis sistem seperti SIEM, DarkTrace, dan Threat Intelligence Feed internal</li>
	<li>Menerbitkan notifikasi insiden awal (initial incident ticket)</li>
	<li>Memberikan rekomendasi awal mitigasi teknis kepada L2 dan unit terkait</li>
	<li>Memastikan semua aktivitas dan log insiden terdokumentasi dengan baik</li>
</ul>

IT Security Operation Staff

Indonesia Stock Exchange (IDX) is a Self-Regulatory Organization that creates a trusted and credible financial market infrastructure to deliver a fair, orderly, and efficient market, accessible to all stakeholders through innovative products and services. Our vision is to be a competitive stock exchange with world-class credibility. We aim to develop the Indonesian capital market to bring prosperity as one of the pillars of the Indonesian economy. We also actively seek to create more impact globally by joining the World Federation of Exchanges and Sustainable Stock Exchanges. Our goal is to become a credible exchange that drives financial deepening, enabling Indonesia to become the 5th largest economy by 2045. 

Our core values, Teamwork, Integrity, Professionalism, and Service Excellence (TIPS), are set to be our DNA. This is how we live at IDX. TIPS become the spirit that leads us to strengthen collaboration, and innovation, and to continuously go above and beyond to achieve our goals. 

People play significant roles in the success of IDX, and thus we put people as our priority. Ensuring our people have nurturing and exciting working experiences, we are fully committed to developing and energizing our people by providing various development programs and opportunities to create an impact through their roles/work. We are blessed to have been awarded as one of the Best Companies to Work for in Asia for the third consecutive year in 2017, 2018, and 2019, organized by HR Asia. 

Indonesia Stock Exchange

As an Information System Audit Officer, you will be responsible for planning, preparing, executing, monitoring, and reporting the results of inspection both regular (periodic) and ad hoc (special) inspections of Exchange Members in accordance with the inspection schedule and procedures. Also responsible for providing recommendations to the Unit Head based on the inspection findings to mitigate potential risks to clients, Exchange Members, and the capital market industry. This role ensures Exchange Members’ compliance with applicable capital market laws and regulations, including system compliance aspects such as IT governance, IT risk management, and IT control.

Auditing and Compliance

Attention to Detail

Internal Audit

Information security

Team Leader of Information Security Auditor or Inspector

About the Job: 
Lead the development and maintenance of a compliance framework aligned with business strategies, conduct external audits, and manage security risks to protect sensitive data such as cardholder data (CHD) and personally identifiable information (PII).

 

What you will do:

<ul>
	<li>Ensure the implementation of payment gateway security follows PCI DSS v4.0, ISO 27001:2022, GDPR, SOC 2, and data privacy regulations.</li>
	<li>Monitor changes in industry regulations and assess their impact on the organization, updating compliance policies and procedures accordingly.</li>
	<li>Develop and manage a compliance framework that aligns with business strategy and ensures adherence to laws and regulations.</li>
	<li>Coordinate and lead external compliance audits (PCI DSS, ISO 27001, SOC 2), including audit preparation, document collection, and external audit team management.</li>
	<li>Review and create security policies and procedures that meet regulatory requirements and industry best practices.</li>
	<li>Ensure employee adherence to security policies and communicate policies effectively across the organization.</li>
	<li>Maintain documentation for compliance activities, including risk assessments, audits, incident response exercises, and remediation efforts.</li>
	<li>Identify potential security risks, mitigate non-compliance risks, and implement controls to protect data and meet regulatory requirements.</li>
	<li>Collaborate with legal, IT, and operations teams to mitigate risks and ensure security policies protect sensitive data like CHD and PII.</li>
	<li>Perform regular Data Protection Impact Assessments (DPIAs) to ensure data handling practices comply with privacy laws (GDPR, etc.).</li>
	<li>Oversee encryption, tokenization, and data anonymization practices to meet regulatory requirements.</li>
	<li>Ensure third-party vendors and partners comply with security and compliance requirements, including performing vendor security assessments and audits.</li>
	<li>Oversee incident response protocols to ensure they comply with data breach notification laws (GDPR, PCI DSS) and manage incident reporting.</li>
	<li>Ensure forensic investigations are conducted and documented for security incidents, with appropriate actions taken for resolution and prevention of future incidents.</li>
	<li>Develop and deliver security compliance training programs for staff, including management and IT personnel, ensuring an understanding of regulatory requirements.</li>
	<li>Conduct security awareness campaigns and compliance-focused training sessions to reduce human-related security risks.</li>
	<li>Provide regular reports on compliance status, risk assessments, audit findings, and remediation efforts to senior management and stakeholders.</li>
	<li>Develop Key Risk Indicators (KRI) and Key Performance Indicators (KPI) to measure compliance effectiveness and track improvements.</li>
	<li>Promote a culture of continuous improvement by identifying opportunities to enhance compliance processes, tools, and resources.</li>
</ul>

IT Compliance

PT BFI Finance Indonesia Tbk (BFI Finance) is one of the long-established pioneers in the financing sector in Indonesia. Founded in 1982, BFI Finance is recognized as a company with a wide network, supported by more than 200 financing outlets across provinces. In 1990, the Company became one of the first multifinance companies to list its shares on the Jakarta Stock Exchange and Surabaya Stock Exchange (both now known as IDX), with the ticker code BFIN.

PT BFI Finance Indonesia Tbk

<ol>
	<li>Melakukan implementasi dan konfigurasi terutama terkait dengan Virtualisasi VM Server &amp; storage (private cloud environment) dan High Availability pada server aplikasi yang dibutuhkan internal perusahaan (internal office tools) maupun worldwide internet/vpn end-user (product application).</li>
	<li>Kolaborasi dengan departemen lain dalam provision &amp; deployment untuk memastikan ketersediaan resource compute engine bekerja dengan baik (high availability dan reliability).</li>
	<li>Melakukan monitoring secara berkala terhadap penggunaan resources &amp; capacity planning. </li>
	<li>Bertanggung jawab untuk bertindak apabila ada alert atau notifikasi pada VM Server &amp; system services yang berkaitan (baik internal departemen maupun departemen lain).</li>
	<li>Bekerja sama dengan pihak ketiga/ vendor dalam hal penanganan incident/problem/change.</li>
</ol>

Enterprise System Engineer

OttoDigital is part of Salim Group Digital Ecosystem (Financial Technology) - aims to empower “the underserved” and “the unbanked” population through integrated implementation of the Group digital payment ecosystem. We are digital platform and solution to businesses and enterprises, enabling various digital transactions on their services to better serve consumers.

OttoDigital Group

<ul>
	<li>Maintain and enhance the Youtap Group's compliance programs for ISO 27001, PCI-DSS, GDPR, and SOC 2.</li>
	<li>Conduct regular internal audits and risk assessments to identify compliance gaps and implement corrective actions.</li>
	<li>Monitor and interpret relevant regulations and standards changes, and communicate their impact to stakeholders.</li>
	<li>Develop and maintain comprehensive compliance documentation, policies, and procedures.</li>
	<li>Coordinate and manage external audits conducted by QSAs and regulatory bodies.</li>
	<li>Work closely with regional teams and subsidiaries to ensure consistent 
	compliance across all Youtap Group entities.</li>
	<li>Provide guidance and support to business units on compliance-related 
	matters.</li>
	<li>Facilitate communication and collaboration between internal teams and 
	external auditors.</li>
	<li>Identify and assess potential compliance risks and develop mitigation 
	strategies.</li>
	<li>Implement and monitor controls to prevent and detect compliance violations.</li>
	<li>Conduct incident response and investigations related to compliance breaches.</li>
	<li>Develop and deliver compliance training programs to employees across the 
	organization.</li>
	<li>Promote a culture of compliance through ongoing communication and 
	awareness initiatives.</li>
	<li>Work closely with QSA's in Singapore and India to ensure seamless audits, 
	and remediation of any findings.</li>
</ul>

Kalibrr Job Search

Credit & Industry Analyst

SECURITY ARCHITECT

IT Security

IT Security

IT Security Engineer

Information Security Engineer

IT Security Officer

IT Compliance & Security

Network Security Officer

IT Security & Infrastructure Manager

IT Security Operation Staff

Team Leader of Information Security Auditor or Inspector

IT Compliance

Enterprise System Engineer

Senior Financial Compliance Specialist