Deskripsi Pekerjaan
Are you a detail-oriented Cybersecurity professional with a passion for Governance, Risk, and Compliance (GRC)? ScienTec Consulting is looking for a dedicated Cybersecurity Engineer (GRC) to join our team in the Central Region. In this pivotal role, you will bridge the gap between technical security measures and organizational compliance frameworks, ensuring our client environments remain secure, resilient, and audit-ready.
As a GRC Cybersecurity Engineer, you will play a key role in identifying vulnerabilities, managing risk assessments, and overseeing compliance against industry standards. This position is perfect for a professional who enjoys translating complex security policies into actionable technical controls and collaborating with cross-functional stakeholders to drive security maturity.
Tanggung Jawab
- Develop, maintain, and implement comprehensive GRC frameworks and policies.
- Conduct regular IT security risk assessments and provide actionable remediation plans.
- Collaborate with internal and external auditors to ensure compliance with standards such as ISO 27001, NIST, and local regulatory requirements.
- Monitor and manage security exceptions, ensuring effective tracking and timely resolution.
- Translate business and technical requirements into effective security controls.
- Facilitate security awareness training and workshops for organizational staff.
- Assist in the management of security-related documentation and policy review life cycles.
- Participate in incident response planning and business continuity exercises.
Kualifikasi
- Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
- Minimum 2-4 years of experience in cybersecurity with a specific focus on GRC.
- Strong understanding of major security frameworks (ISO 27001, NIST CSF, SOC2, or CIS Controls).
- Proven experience in risk management, compliance auditing, and vulnerability management.
- Excellent analytical skills with the ability to interpret technical data for non-technical stakeholders.
- Relevant certifications such as CRISC, CISA, CISSP, or CISM are highly advantageous.
- Strong written and verbal communication skills to effectively document and present compliance reports.
- Ability to work independently and as part of a dynamic, fast-paced consulting team.