Deskripsi Pekerjaan
Allo Bank Indonesia is seeking a visionary and highly skilled IT Security Design & Engineering Section Head to lead our cybersecurity defense strategy. In this pivotal role, you will be responsible for architecting, designing, and overseeing the implementation of advanced security frameworks across our entire digital banking ecosystem, including applications, complex network infrastructures, and cloud-native environments.
As a leader within our technology division, you will bridge the gap between high-level security strategy and technical execution. Your primary mission is to ensure that our digital banking platform remains resilient against emerging threats while maintaining seamless performance for our millions of customers. You will work closely with DevOps, Product, and Infrastructure teams to bake security into every layer of our technology stack, moving beyond traditional perimeter defense into a proactive, zero-trust paradigm.
The ideal candidate is a subject matter expert in modern security engineering who thrives in a fast-paced fintech environment. You will stay ahead of the curve regarding global cybersecurity trends and local regulatory requirements (OJK/BI), ensuring that Allo Bank remains a benchmark for digital trust in Indonesia.
Tanggung Jawab
- Lead the design and development of robust security architectures for applications, cloud infrastructure, and internal networks.
- Develop and maintain technical security standards and secure configuration baselines across all platforms.
- Oversee the integration of security tools and automated testing within the CI/CD pipeline to support a true DevSecOps culture.
- Conduct comprehensive threat modeling and risk assessments for new digital banking features and third-party integrations.
- Manage the selection, implementation, and optimization of security technologies including WAF, EDR, IAM, and encryption services.
- Provide expert technical guidance to the engineering team on secure coding practices and vulnerability remediation.
- Ensure technical compliance with ISO 27001, PCI-DSS, and local financial regulations (POJK).
- Mentor and lead a team of security engineers, fostering professional growth and technical excellence.
Kualifikasi
- Bachelor’s or Master’s degree in Computer Science, Information Security, or a related technical field.
- Minimum of 7-10 years of professional experience in IT Security, with at least 3 years in a leadership or managerial capacity.
- Proven expertise in Cloud Security (AWS, Google Cloud, or Azure) and containerization security (Kubernetes/Docker).
- Deep understanding of network protocols, cryptography, and modern web application security frameworks.
- Hands-on experience with security automation and scripting (Python, Go, or Bash).
- Relevant professional certifications such as CISSP, CISM, CCSP, or CSSLP are highly preferred.
- Strong analytical mindset with the ability to solve complex technical security challenges.
- Excellent communication and stakeholder management skills, with proficiency in English and Bahasa Indonesia.