Deskripsi Pekerjaan
Are you a strategic thinker looking to safeguard an organization's digital future? We are seeking a skilled IT Risk Specialist to join our team in the Central Region. In this pivotal role, you will serve as the Second Line of Defense, working alongside First Line functions to proactively identify, assess, monitor, and report on key IT risks. This is an excellent opportunity for a detail-oriented professional to drive governance, ensure compliance, and significantly enhance our organizational risk posture.
As a member of our risk management team, you will act as a trusted advisor, ensuring that business operations are conducted within acceptable risk parameters. You will collaborate with various departments to embed a risk-aware culture, providing the insights needed for senior leadership to make informed decisions. If you have a strong background in IT governance and a passion for risk mitigation, we want to hear from you.
Tanggung Jawab
- Conduct comprehensive risk assessments and analysis of IT systems, applications, and business processes.
- Partner with First Line teams to identify vulnerabilities and embed risk management into daily operations.
- Monitor the status of identified risks and ensure timely reporting and escalation to stakeholders.
- Develop and maintain risk registers, policies, and compliance documentation.
- Perform internal audits and reviews to ensure adherence to IT governance frameworks and regulatory standards.
- Provide expert guidance and recommendations on risk mitigation strategies to technical and non-technical teams.
Kualifikasi
- Bachelor’s degree in Information Technology, Cybersecurity, or a related field.
- Proven experience working in a Second Line of Defense (Risk/Compliance) role within the IT sector.
- Strong understanding of IT risk frameworks such as NIST, ISO 27001, and COBIT.
- Excellent analytical skills with a keen eye for detail and risk identification.
- Strong communication skills, with the ability to influence stakeholders at all levels effectively.
- Relevant professional certifications (e.g., CRISC, CISA, CISSP) are highly preferred.