Astra Graphia Information Technology (AGIT) is a Digital Service Provider, provides one stop Solution on Digital Services. Since 1983, AGIT is part of PT Astra International Tbk Group, a conglomeration company in Indonesia that currently has 212 subsidiaries and affiliate companies with 7 line of businesses (automotive, financial services, heavy equipment, agribusiness, information technology, infrastructure & logistics, and property). AGIT itself is owned 100% by PT Astra Graphia Tbk

As a Digital Service Provider, AGIT has transformed its business not only focusing on providing ICT infrastructure and application related services but more towards on what we called as a One-Stop-Solutions on Digital Services, both in on-premise and cloud infrastructure model.

We bring the concept of digitize things (digitize everything), to help and to assist our customers in performing their digital transformation through the implementation on digital technology & digital solutions.

We have four main pillars in our Digital Solution Portfolios that cover the entire journey required to conduct digital transformation starting from Digital Strategy, Digital ICT Foundation, Digital Platform, and Digital Services

PT Astra Graphia Information Technology

<ol style="list-style-type: upper-alpha;">
	<li>IT Security jaringan</li>
</ol>

<ul>
	<li>Menguasai perangkat security jaringan (Firewall, IPS, WAF, dll)</li>
	<li>Kemampuan menganalisa port yang dibutuhkan</li>
	<li>Implementasi patch di perangkat jaringan</li>
	<li>Kemampuan korelasi event dari perangkat security yang ada</li>
	<li>Update dengan perkembangan teknologi security</li>
</ul>

<ol style="list-style-type: upper-alpha;">
	<li>IT Security server</li>
</ol>

<ul>
	<li>Menguasai security server (baseline security configuration, antivirus, firewall server)</li>
	<li>Menguasai patch di OS Windows dan Linux</li>
	<li>Menguasai security terkait Office 365</li>
	<li>Menguasai keamanan email (SMTPS, dll)</li>
	<li>Kemampuan korelasi event dari log di OS</li>
	<li>Update dengan perkembangan teknologi security</li>
</ul>

Jobdesc:

<ol>
	<li>Perform day to day operations for Security Analyst</li>
	<li>Perform monitor, manage, and configure security tools, review incidents to assess their urgency, and escalate incidents if necessary.</li>
	<li>Maintain the highest SLA Standard for Operations and Improvement.</li>
	<li>Fine-tune SIEM rules to reduce false positive and remove false negatives.</li>
	<li>Learn new attack patterns, actively participate in security forums.</li>
</ol>

IT Security

Focus Solusi Infotama adalah Perusahaan penyedia layanan informasi teknologi terkemuka di Indonesia. Kami membantu pelanggan kami dengan mengoptimalisasi operasional teknologi informasi mereka dan kami membantu menjaga keamanan digital data Perusahaan pelanggan kami dengan memberikan layanan Solusi serta konsultasi dalam layanan digital yang di dukung oleh Beragam Solusi hardware & software yang dioptimalisasi dalam berbagai macam ekosistem dan reaktualisasi teknologi infrastruktur serta sistem keamanan cyber security.

PT Focus Solusi Infotama

•Policy Management &amp; Push: Secara rutin melakukan push dan implementasi kebijakan keamanan (policy rules) pada perangkat Next-Generation Firewall (NGFW) dan Web Proxy berdasarkan permintaan perubahan yang disetujui.

•Troubleshoot &amp; Blocking: Melakukan troubleshooting dasar terkait implementasi policy dan membantu dalam proses blocking atau unblocking lalu lintas/situs sesuai dengan protokol keamanan.

•Traffic Analysis (Dasar): Melakukan analisis traffic dasar pada log Firewall dan NetFlow untuk memverifikasi kebijakan, mengidentifikasi anomali, dan mendukung investigasi insiden kecil.

•Configuration Support: Membantu dalam konfigurasi, backup, dan pemeliharaan rutin pada perangkat keamanan (Firewall, IDS/IPS, Proxy) di bawah bimbingan Senior Engineer

•Log Verification: Memastikan semua perangkat utama berhasil mengirimkan log ke platform SIEM dan membantu dalam validasi kualitas data log.

•Documentation: Membantu membuat dan memperbarui Standard Operating Procedure (SOP) dan runbook terkait perubahan policy dan troubleshooting insiden harian.

Junior Security Engineer

BOSNET is an FMCG (Fast-Moving Consumer Goods) super-apps and ecosystem provider with two primary business facets: selling distribution super-apps and offering an ecosystem for FMCG principals to enhance their order-generation and logistics. The services provided include e-payment, pay-later options, advertising, market insights, and back-office solutions. Currently, our ecosystem processes over IDR 50 trillion worth of transactions annually.

BOSNET Distribution Indonesia

<ul>
	<li>Implement, monitor, and maintain cyber security controls, policies, and tools.</li>
	<li>Perform vulnerability assessments and support remediation in cloud and on-prem environments.</li>
	<li>Assist in penetration testing and contribute to risk and security assessments.</li>
	<li>Develop and execute cyber incident response and support disaster recovery plans.</li>
	<li>Deploy, configure, and optimize security tools and technologies.</li>
	<li>Maintain accurate documentation of security activities, incidents, and procedures.</li>
	<li>Collaborate with IT and other teams to ensure security is integrated across operations.</li>
</ul>

Cyber Security Engineer

OCBC Indonesia (formerly known as OCBC NISP) is the fourth oldest bank in Indonesia, which was founded in April 4th 1941 in Bandung under the name of NV Nederlandsch Indische Spaar En Deposito Bank.

OCBC Indonesia then grown to be a solid and dependable bank, especially in providing service for small business segments. It officially became a commercial bank in 1967, Foreign exchange bank in 1990 and public corporate in Indonesia Stock Exchange in 1994.

In the end of 1990, OCBC Indonesia managed to pass the Asia monetary crisis and the fall of banking industry without any recapitalization obligation aid from the government. OCBC Indonesia became one of the first few banks to resume lending during the crisis. This initiative enabled the Bank to note a high growth.

OCBC Indonesia good reputation and its promising growth has attracted the interest of International Finance Corporation (IFC), a part of World Bank Group, which then became a shareholder in 2001-2010 and from OCBC Singapore which then became the shareholder OCBC Indonesia. 

With the support from OCBC Bank-Singapore, OCBC Indonesia has implemented aggressive programmes to strengthen the infrastructure, human resources, information and technology, as well as office networking.

PT Bank OCBC NISP, Tbk is licensed and supervised by the Otoritas Jasa Keuangan (OJK) and is an LPS participant.

PT Bank OCBC NISP, Tbk

Responsibilities:

Yellow Team [Vacancy Closed]

<ul>
	<li>As a Security Architect - Create and enhance security architecture</li>
	<li>Assessing complex IT environments and mapping the data flow of the through systems/applications and organizational functions.</li>
	<li>Architecting and designing cybersecurity solutions for multi-tenant managed security services environment</li>
	<li>Designing shared services / cloud infrastructure environment</li>
	<li>Acting as an expert in cyber defense activities, and building of substantial experience in design, implementation and validation phases for security monitoring projects (SIEM architecture design, IDSP deployment).</li>
	<li>Facilitating architecture sessions to develop enterprise security architecture that fits within clients existing environment.</li>
</ul>

 

Green Team 

<ul>
	<li>Design and Implement Security Solutions: Develop and configure network security architecture, including firewalls, VPNs, and intrusion detection systems.</li>
	<li>Conduct Risk Assessments: Regularly evaluate network security measures and conduct vulnerability assessments to identify weaknesses.</li>
	<li>Documentation and Reporting: Maintain documentation of network security policies, procedures, and incidents, providing detailed reports to management.</li>
</ul>

 

Blue Team (L1 - Shift Working) 

<ul>
	<li>Act as Incident first responder for a 24/7 SOC Operations</li>
	<li>Monitor security sensors and review logs to identify network anomalies or intrusions</li>
	<li>Perform initial analysis of security alerts</li>
	<li>Escalate security incidents using established policies and procedures in a timely manner</li>
</ul>

 

Blue Team (L2 - SOC Analyst) 

<ul>
	<li>Work with stakeholders to analyse potential security incidents, identifying root cause and implement mitigation step(s)/ remedial action(s)</li>
	<li>Perform Response action based on standardize workflow</li>
	<li>Assist with the development of incident response plans, workflows, and SOPs</li>
	<li>Provide threat and vulnerability analysis security advisory services</li>
</ul>

 

Red Team

<ul>
	<li>Deliver Red Team Exercises</li>
	<li>Conduct state-of-the-art penetration testing against web applications, network infrastructures, user workstations, network appliances and other devices and technologies.</li>
	<li>Manual and automated security testing of Web applications, APIs, and Mobile Applications.</li>
	<li>Do code review</li>
	<li>Static and Dynamic testing (SAST &amp; DAST) of thick applications</li>
	<li>Develop Proof-of-Concept (PoC) for the identified vulnerabilities.</li>
	<li>Provide remediation guidance to identified vulnerabilities.</li>
	<li>Develop and execute security testing project plans</li>
</ul>

IT Security Engineer

PT. Bawana Margatama, also known as Bawatama, specializes in outsourcing and offshoring services. Additionally, our company also specializes in personnel management services. Our company's primary aim is to provide highly skilled professionals to our clients

PT Bawana Margatama

Responsibilities

1. Install and configure security agents (PAM, AV/EDR, DLP, SIEM agents, etc.). 
2. Monitor agent performance and troubleshoot related issues. 
3. Coordinate with Infrastructure and Application teams during deployment activities. 
4. Perform basic server hardening on Windows and RHEL environments. 
5. Prepare documentation for implementation results and standard operating procedures.

IT Security Support Engineer

Our History PT. MASTERSYSTEM INFOTAMA (MSI) was established in July 1994. Through the long journey, Mastersystem has developed into one of the leading ICT infrastructures providers and dominates not only the enterprise banking market in Indonesia, but also in oil and gas, enterprise and telecommunication industry. Headquartered in Jakarta, MSI has branch office in Surabaya, East Java. MSI has more than 400 employees now with the majority are certified professionals. As our commitment to deliver high quality standard of services, we comply with ISO standard i.e. ISO 9001:2015 (Quality Management) and ISO/IEC 20000-1:2011 (IT Service Management) to serve our customers better. 1994 Establishment as a PC distributor 1996- 1999 Beginning of network and system integration business, Clients: 20 2004 Cisco Gold Partner, Microsoft Large Account Reseller, HP First Tier Partner, Clients: 60, 2009 Beginning of data driven solution era, Clients: 140 2011 Virtual Desktop Infrastructure 2013 - 2014 Security Analytics and Contact Center, Clients: 250 2016 Big Data Analytics and API Gateway, Clients: 500 2018 - Now Next Gen Technologies (AI, IoT), Focus on Intellectual Property, Clients: 1000+ Why Mastersystem Infotama Driven by technology powered business innovation and committed to bridge the gap between technology and business needs, we empowering business by building, integrating, and providing consultation the customers need. Proven track record of success selling in a highly competitive environment, Mastersystem Infotama offers decades of experience to deliver quality solutions and help your organization to stay on top of the market trends and strengthening your value propositions to keep growing. Awards & Recognitions Mastersystem Infotama - 2018 Infoblox Top ASEAN Partner of the Year Mastersystem Infotama - 2018 Cisco Most Innovative Partner of the Year Mastersystem Infotama - 2018 Cloudera Strategic Deal of the Year Mastersystem Infotama - 2018 Redhat Ready Partner of the Year Mastersystem Infotama - 2018 Cisco APJC Digital Innovation Award Mastersystem Infotama - 2017 Cisco Partner of the Year Mastersystem Infotama - 2017 Microsoft Country Partner of the Year Mastersystem Infotama - 2017 Citrix ASEAN Special Recognition Mastersystem Infotama - 2017 HP Fastest Growing Hybrid IT Corporate Reseller & PS Our Vision, Mission & Value Vision To be Indonesia leader in ICT industry. Mission Bring value to all the stakeholders. Empowering business with innovative technologies, solutions and services. Our Core Value E excellence T teamwork H honesty I innovation C competence

PT Mastersystem Infotama

<ul>
	<li>Primary responsibility is to implement and maintain the security system project.</li>
	<li>Troubleshoots and resolves advanced, complex system access, and connectivity problems through the use of advanced system utilities.</li>
	<li>Prepares systems specifications and technical documentation for implementation project.</li>
	<li>Acquires, tests, applies system software/hardware updates, releases and patches.</li>
	<li>Conducts advanced diagnostics and troubleshoots, system software and hardware and ability to provide root cause analysis.</li>
	<li>Gathers and documents user requirements.</li>
	<li>Develops complex system designs.</li>
	<li>Contributes to team effort by accomplishing related result as needed.</li>
</ul>

Network Security Engineer Checkpoint

Starting an unincorporated business in 1996, Simbadda Group has been distributing high quality consumer electronics throughout Indonesia. The business unit has started to form a corporate business since 2002.

One of our leading brands is SIMBADDA, which is known by the Indonesian people as a pioneer of speakers, cases and power supplies. We are also involved in the distribution of premium gadget accessories and PC components. Simbadda Group will continue to expand its distribution business to grow in the consumer electronics industry in Indonesia.

Simbadda Group always upholds the value of honesty, among others: honesty of quality,  honesty of cooperation in business and trying to establish cooperation with all partners  throughout Indonesia. 

Currently, Simbadda Group is expanding towards digital transformation that is looking for  enthusiastic, passionate, ambitious individuals to be part of us. 


Simbadda Group

<ul>
	<li>Infrastructure Design &amp; Management: Design, implement, and maintain secure, reliable, and scalable IT infrastructure covering networks, servers, cloud environments, and end-user systems.</li>
	<li>Infrastructure Design &amp; Management: Ensure high availability, performance, and cost efficiency of infrastructure through continuous monitoring, optimization, and lifecycle management.</li>
	<li>Cybersecurity &amp; Risk Management: Develop and enforce security frameworks, policies, and controls to safeguard company data, systems, and networks.</li>
	<li>Cybersecurity &amp; Risk Management: Continuously assess risks, monitor threats, and implement proactive measures such as endpoint protection, firewall rules, and vulnerability patching.</li>
	<li>User &amp; Access Management: Oversee the lifecycle of user accounts, including provisioning, role-based access control (RBAC), and deactivation to maintain security and compliance.</li>
	<li>User &amp; Access Management: Implement centralized identity and access management (IAM) systems and enforce policies for password security, multi-factor authentication, and privilege reviews.</li>
	<li>Compliance &amp; Access Governance: Ensure compliance with cybersecurity regulations, data privacy laws, and internal governance standards.</li>
	<li>Compliance &amp; Access Governance: Oversee identity and access management (IAM) systems to maintain secure, role-based permissions and reduce insider risk.</li>
	<li>Collaboration &amp; Leadership: Work closely with IT Enterprise Architecture, Data, and Software Engineering teams to align infrastructure and security design with business goals.</li>
</ul>

IT Infrastructure & Security Manager

We are looking for a Senior Network Security Engineer with deep expertise in perimeter security, traffic visibility, and inline security infrastructure, with hands-on experience managing Palo Alto Networks, Forcepoint, Keysight ThreatArmor and Ixia iBypass.

 

Key Responsibilities

<ul>
	<li>Design, implement, and maintain enterprise perimeter security architecture using Palo Alto Networks NGFW.</li>
	<li>Perform advanced firewall configuration &amp; hardening, including:
	<ul style="list-style-type: circle;">
		<li>Security Policies, NAT, Zones</li>
		<li>Routing (Static, OSPF, BGP)</li>
		<li>App-ID, User-ID, Threat Prevention, WildFire</li>
	</ul>
	</li>
	<li>Manage ThreatArmor Evision for:
	<ul style="list-style-type: circle;">
		<li>Threat visibility &amp; traffic classification</li>
		<li>Monitoring attack behavior &amp; suspicious patterns</li>
		<li>Threat scoring and security analytics</li>
	</ul>
	</li>
	<li>Manage Ixia iBypass for:
	<ul style="list-style-type: circle;">
		<li>Inline security high availability</li>
		<li>Automatic traffic bypass during device failure</li>
		<li>Maintaining uninterrupted security enforcement</li>
	</ul>
	</li>
	<li>Administer Forcepoint Web Security &amp; DLP, including:
	<ul style="list-style-type: circle;">
		<li>Web filtering &amp; content control</li>
		<li>Data classification &amp; insider threat protection</li>
	</ul>
	</li>
	<li>Perform advanced troubleshooting for:
	<ul style="list-style-type: circle;">
		<li>Latency, asymmetric routing, packet loss, inspection bottlenecks</li>
		<li>SSL inspection issues and performance degradation</li>
	</ul>
	</li>
	<li>Integrate security infrastructure with SIEM, SOAR, Threat Intelligence Platforms</li>
	<li>Lead:
	<ul style="list-style-type: circle;">
		<li>Firmware upgrades</li>
		<li>Signature &amp; threat updates</li>
		<li>License management</li>
		<li>Capacity planning</li>
	</ul>
	</li>
	<li>Develop and maintain technical documentation, SOPs, and security architecture diagrams</li>
</ul>

Collaborate closely with SOC, Network, System, and DevOps teams

Senior Network Security Engineer

NICEpay is an Internet Payment Gateway Provider which brings you a reliable technical support and proven expertise in local system integration, empowering merchant boarding, and maintenance. We are empowering merchant to secure its e-commerce revenue streams from anywhere in the world with our enhanced Fin-Tech solution. We are IT company working with banks and online merchant in delivering Internet Payment Gateway Solution for your e-commerce business.

PT IONPay Networks (NICEPAY)

- Develop and implement IT Compliance policies, procedures and practices 
- Create and manage effective action plans in response to audit discoveries and compliance violations 
- Involved procurement process and manage licenses 
- Responsible for maintain security in the cloud and on-premise 
- Provide appropriate solutions in terms of selecting security used in terms of efficiency, reliability, security and other related aspects 
- Monitor and test security performance for possible bottlenecks, identify possible solutions, and work with developers to implement necessary fixes 
- Cooperate with vendors and other IT department personnel in working and solving problems 
- Able to perform crisis management and incident activity by remote or onsite 
- Involved Pcidss, Pci3ds, &amp; Iso27001 compliance

IT Compliance & Security Team Leader

Kompas Gramedia, through its more than 50 years of history, is striving for one goal: enlightening and empowering Indonesia. To ensure that we are able to serve the nation for another 50 years, we are undergoing a digital transformation; strengthening and expanding our solid business pillars by developing new digital business initiatives.

Our vision is to enlight all the people in Indonesia with all the knowledge we have.

Kompas Gramedia

<ul>
	<li>Continuously monitor systems, networks, applications, and endpoints using security tools (SIEM and IDS/IPS) to identify suspicious activities or anomalies.</li>
	<li>Analyze security logs and alerts to detect potential cyber threats, vulnerabilities, or policy violations.</li>
	<li>Perform triage and prioritization of security alerts to determine whether an incident requires escalation or further action.</li>
	<li>Investigate detected cybersecurity incidents, including malware attacks, intrusion attempts, and data breaches.</li>
	<li>Conduct root cause analysis (RCA) for security incidents and recommend corrective actions.</li>
	<li>Monitor and maintain security tools and infrastructure used in daily operations (firewalls, VPNs, anti-malware solutions, SIEM, etc.).</li>
	<li>Perform routine security patching on systems and applications to minimize vulnerabilities.</li>
	<li>Conduct tuning and optimization of security tools to reduce false positives and improve detection accuracy.</li>
	<li>Prepare reports and documentation related to security incidents, monitoring results, and risk assessments, and support audit activities.</li>
	<li>Develop and maintain security standard operating procedures (SOPs).</li>
	<li>Monitor the implementation of new technologies and processes to enhance security effectiveness.</li>
	<li>Collaborate with other department and vendor related with IT security operation</li>
	<li>Scheduled regular vulnerability scan and penetration test for new system/application.</li>
	<li>Design and implement real security controls across NGFW, EDR, and cloud security - in production, for real customers. </li>
</ul>

Security Engineer Corporate IT & IS

PT Transnovasi Bangun Persada mendukung industry 4.0 untuk public dan private sector. Transnovasi Berkembang dengan inovasi, Berkreasi dengan Dedikasi.

Transnovasi Bangun Persada

Job Descriptions

<ul>
	<li>Infrastructure: Merancang &amp; implementasi arsitektur cloud (multi-region, scalable, secure, cost-efficient).</li>
	<li>Kubernetes: Setup &amp; maintenance cluster, service mesh (Istio/Linkerd), upgrade &amp; patching.</li>
	<li>Bare Metal &amp; Data Center: Instalasi &amp; maintenance hardware, RAID, monitoring, lifecycle management, data center operations.</li>
	<li>Networking: Konfigurasi Mikrotik (routing, QoS), OPNsense (firewall, IDS/IPS, VPN), VLAN, load balancer, network troubleshooting.</li>
	<li>Database: Administrasi PostgreSQL (TimescaleDB, PostGIS), MongoDB (replica/shard), Redis (cluster/HA), backup &amp; DR.</li>
	<li>• Application Stack: Deploy &amp; optimasi Next.js (SSG/SSR/ISR), NestJS microservices, Socket io real-time apps, Go services.</li>
	<li>CI/CD &amp; Automation: Bangun pipeline, integrasi automated testing, secrets injection dengan Infisical, deployment strategi (blue-green, canary, rolling).</li>
	<li>Monitoring &amp; SRE: Implement observability stack, custom metrics, alerting, SLA/SLO, capacity planning.</li>
	<li>Security &amp; Compliance: Container/image scanning, secrets rotation &amp; audit logging, compliance reporting, disaster recovery testing.</li>
	<li>Leadership: Mentoring tim DevOps, code review, technical decision making, dokumentasi &amp; runbooks.</li>
	<li>Innovation: Evaluasi &amp; adopsi tools baru, standardisasi proses, POC teknologi terbaru.</li>
</ul>

Development, Security, Operation (DSO) Specialist

Who we are:

Quantic is an Information Technology service and product company based in Jakarta, Indonesia and Mumbai, India, founded in 2017. We provide ready-to- use AI based solutions for some of the most common business use cases. We also have a portfolio of world-class products in Wealth Management, Lending & Collections as well as Digital Banking that we implement for your organization.

 

Our Team:

Our team has been in the forefront of technology and dealing with large mission- critical software projects for leading global organizations. Our consulting services bring to the table solid research in Data Science as well as in AI and Machine Learning techniques.

 

Our Value:

We are process-oriented, we follow global best-practices to ensure delivery. We value the robustness of software, and rigorous software engineering.

 

Our Goals:

If your organization is new to data-backed decision support analytics, then we will hold your hand and introduce you to this exciting journey. Our consultants will study your business and advise how you can benefit easily at low cost. We will launch a low-risk pilot project to show quick benefits to your stakeholders and build the organization’s confidence in developing an AI based analytics system for long-term value. We will completely align with your business goals, your processes and policies, and work as an extension of your own team.



Quantyc.ai

<ul>
	<li>To lead and manage IT infrastructure &amp; Cyber Security projects, particularly those involving deployment and installation in data center environments.</li>
	<li>The role requires strong technical expertise and proven project management capabilities.</li>
	<li>Plan and manage the full lifecycle of IT infrastructure &amp; Cyber Security projects.</li>
	<li>Ensure smooth deployment and installation of systems in data center environments, meeting standards and SLAs.</li>
	<li>Identify and mitigate project risks effectively.</li>
	<li>Serve as the liaison between technical teams, management, and third-party vendors.</li>
</ul>

IT PM Infrastructure &  Cyber Security Projects

Indonesia Stock Exchange (IDX) is a Self-Regulatory Organization that creates a trusted and credible financial market infrastructure to deliver a fair, orderly, and efficient market, accessible to all stakeholders through innovative products and services. Our vision is to be a competitive stock exchange with world-class credibility. We aim to develop the Indonesian capital market to bring prosperity as one of the pillars of the Indonesian economy. We also actively seek to create more impact globally by joining the World Federation of Exchanges and Sustainable Stock Exchanges. Our goal is to become a credible exchange that drives financial deepening, enabling Indonesia to become the 5th largest economy by 2045. 

Our core values, Teamwork, Integrity, Professionalism, and Service Excellence (TIPS), are set to be our DNA. This is how we live at IDX. TIPS become the spirit that leads us to strengthen collaboration, and innovation, and to continuously go above and beyond to achieve our goals. 

People play significant roles in the success of IDX, and thus we put people as our priority. Ensuring our people have nurturing and exciting working experiences, we are fully committed to developing and energizing our people by providing various development programs and opportunities to create an impact through their roles/work. We are blessed to have been awarded as one of the Best Companies to Work for in Asia for the third consecutive year in 2017, 2018, and 2019, organized by HR Asia. 

Indonesia Stock Exchange

As an Information System Audit Officer, you will be responsible for planning, preparing, executing, monitoring, and reporting the results of inspection both regular (periodic) and ad hoc (special) inspections of Exchange Members in accordance with the inspection schedule and procedures. Also responsible for providing recommendations to the Unit Head based on the inspection findings to mitigate potential risks to clients, Exchange Members, and the capital market industry. This role ensures Exchange Members’ compliance with applicable capital market laws and regulations, including system compliance aspects such as IT governance, IT risk management, and IT control.

Auditing and Compliance

Attention to Detail

Internal Audit

Information security

Team Leader of Information Security Auditor or Inspector

FIFGROUP, a subsidiary of PT Astra International Tbk, was established in 1989 and operates in the consumer financing sector. Their primary focus is financing Honda motorcycles through FIFASTRA. Additionally, they offer electronics and furniture financing through SPEKTRA, and multipurpose financing through DANASTRA. AMITRA provides financing for Haji, Umrah, and other Sharia services. FIFGROUP's vision is to become the best financing company in Indonesia, with a mission to deliver superior financial solutions and customer satisfaction.

FIFGROUP

PT Astra Digital Arta, also known as AstraPay is part of Astra International. AstraPay available to support current digital transactions trends for Indonesian people.

AstraPay mobile application provides range of digital transactions supporting daily needs, from electricity bill, BPJS, to health insurance payment.

Enjoy every convenience of digital transaction with AstraPay. Available on Google Play Store http://ap.money/pakaiAP

AstraPay

<ol>
	<li>Conduct risk assessments identifying potential risks, evaluating impact, and developing mitigation strategies</li>
	<li>Perform ad hoc risk assessments to support strategic decisions</li>
	<li>Develop policies and procedures to ensure the effective implementation of the company's risk management in line with the risk levels aligned with the management's and stakeholders' risk appetite</li>
	<li>Perform third-party risk management, ensuring vendors meet compliance, security, and risk management standards</li>
	<li>Ensure compliance with laws, regulations, and industry standards, including reporting to Astra International, Astra Financial, PPATK, and Bank Indonesia, etc</li>
	<li>Develop and enforce an enterprise-wide third-party risk framework, ensuring compliance and operational risk mitigation</li>
	<li>Analyze data and conduct fraud investigations to identify suspicious activities and prevent financial risk</li>
	<li>Monitor risk mitigation to ensure all necessary actions are taken for ISRM, cybersecurity, fraud, operational, compliance, and other risks. Maintain and enhance loss event data with internal reports and root cause analysis for effective risk monitoring.</li>
	<li>Assist in the development and implementation of BCM policies, procedures, and tabletop exercises to enhance resilience and risk preparedness.</li>
	<li>Develop risk management culture, conduct risk training and awareness programs to enhance employees’ understanding of risk management, compliance, and fraud prevention.</li>
</ol>

Risk Management Officer

<ul>
	<li>Manage escalated delivery requests and resolve services issues for signature and priority customers.</li>
	<li>Coordinate regular meetings on SLA, service performance, updates, and issue handling.</li>
	<li>Review SLA and service performance report preparation.</li>
	<li>Ability to plan and manage Cyber Security projects, including budgeting, resource allocation, and timeline management</li>
	<li>Prepare and deliver security proposals, planning, roadmap, topology, reports, and risk evaluations to support business activities.</li>
	<li>Handle incident response together with the CSIRT, including investigation, analysis, root cause</li>
	<li>Leading the implementation and configuration of security technologies to customers</li>
	<li>Demonstrated experience in operational security management, incident handling, and policy enforcement.</li>
	<li>Proficiency in SIEM, log analysis, network traffic analysis, penetration testing, and threat hunting.</li>
	<li>Drive research and development in new security technologies, threat intelligence solutions, and innovative protection methods.</li>
	<li>Identify emerging risks and recommend proactive controls to improve resilience against current and future threats on customers</li>
</ul>

Kalibrr Job Search