IT Security and Governance Executive

About the role

The IT Security and Governance Executive will be responsible for managing and supporting the organization's cybersecurity operations, security governance, compliance activities, vulnerability management, audit coordination, and security monitoring processes. This role will ensure that the company's IT systems, infrastructure, and security processes comply with internal policies, industry standards, and regulatory requirements, while continuously strengthening the organization's overall cybersecurity posture.

Key responsibilities

• Conduct vulnerability assessment activities and monitor remediation progress
• Coordinate penetration testing activities with internal teams and external vendors
• Track and ensure closure of security vulnerabilities and findings
• Prepare vulnerability assessment reports and remediation status updates
• Develop, review, and maintain IT security policies, procedures, standards, and guidelines
• Ensure compliance with internal security policies and regulatory requirements
• Support implementation of cybersecurity frameworks, standards, and best practices
• Conduct periodic compliance reviews and governance assessments
• Support internal and external IT security audits
• Prepare audit documentation, evidence, and reports
• Monitor and track audit findings until closure
• Assist in IT assessment and mitigation planning activities
• Prepare periodic cybersecurity and governance reports for management
• Maintain security documentation, inventory, and governance records
• Develop dashboards and reporting related to vulnerabilities, incidents, compliance, and security posture.
• Ensure proper documentation of security incidents and corrective actions.
• Support cybersecurity awareness and training programs for employees.
• Promote cyber security best practices and compliance awareness within the organization

Requirements

• Bachelor's degree in Information Technology, Computer Science, Information Security, or related field
• Minimum 3–5 years of experience in IT Security, IT Governance, Cybersecurity, or related areas is a must
• Strong proficiency in English both speaking and writing is a must.
• Strong understanding of cybersecurity concepts, governance, and compliance frameworks
• Familiar with vulnerability assessment, security monitoring, and incident management processes
• Familiar with security standards ISO/IEC 27002: Code of Practice for Information Security Management and National Institute of Standards and Technology Cyber Security Framework (NIST CSF)
• Good knowledge of network, infrastructure, and system security
• Strong analytical, documentation, and communication skills
• Placement in North Jakarta

Official Notice to All Prospective Applicants

We hereby urge all prospective applicants to remain vigilant against any fraudulent schemes or unauthorized parties misrepresenting themselves as part of our recruitment process.

Please be informed that the entire recruitment process carried out by our company is conducted free of charge. Our company upholds the highest standards of integrity and ethics. We do not tolerate, under any circumstances, the offering or acceptance of bribes, gifts, gratuities, payments or any other form of inducement related to the recruitment process.