Sr. Officer-Data Security Analyst

Head Quarter - Jakarta

Supervisor

Permanent

IT

13 March 2024

• Safeguard the organizations sensitive information and ensure the integrity, confidentiality, and availability of its data assets.
• Operating at the intersection of cybersecurity and data management, the analyst is responsible for implementing and monitoring security measures to prevent unauthorized access and data breaches as per mandate by PDP Law.
• Conducting risk assessments, developing and executing security policies and procedures, deploying encryption technologies, and actively participating in incident response initiatives which related with data breaches.
• Collaborate with teams from various departments, stay up to date on emerging security threats, and play a vital role in maintaining compliance with data protection regulations and industry standards.

Security Data Monitoring and Alert Triage

• Monitor audit logs, user activities involving sensitive data access
• Flag anomalies & high risk events, categorize security alerts related to data
• Up-to-date misuse case detection rules & response playbooks

Data Breach Risk Quantification

• Develop data classification schema based on impact of exposure or theft
• Discover where sensitive data resides (databases, data lakes, archives) and calculate $ value at risk for sensitive data on it
• Identify vulnerabilities, weak access controls to prioritize remediation
• Data risk assessment reports and threat models

Data Security Incident Response

• Evaluate logs, user activities for unauthorized data access patterns.
• Perform forensic investigations for suspected data theft or misuse
• Incident reports, forensic audits

Qualification:

• Minimum bachelor’s degree in relevant field (Information Technology / Electrical Engineering /Telecommunication Engineering, Cybersecurity, Computer Science, Communications, Information Security or a related field).
• Have 5+ years’ experience in information security domain specifically focused on data security.
• Proficiency in security protocols, cryptography, authentication, authorization, security vulnerabilities, and remediation techniques. Familiarity with programming languages and frameworks is a plus.
• Proficient in: LINUX, Windows Servers, Unix.
• Ability to analyze and identify actions to be taken.
• Excellent time management skills and ability to multi-task and priorities work
• Working well under pressure
• Good communication and influence skill
• Strong understanding of all Information Security Domains
• Sound understanding of businesses supported and security principles and policies
• Knowledge of network, system, and application monitoring technologies

Related Experience:

• Prior experience in leading forensic investigations of data breaches, unauthorized data access incidents.
• Hands-on technical experience in areas like data loss prevention, database activity monitoring, auditing user access etc
• Strong skills around log analysis, correlating events, identifying anomalies to detect misuse of confidential data.
• Proficiency with data protection tools - encryption, tokenization, masking, vaults etc.
• Strong analytical thinking and attention to details given the complex nature of investigations.
• Programming abilities to analyze user activity data and write scripts to automate monitoring & response.
• Familiarity with regulations around data security and breach disclosure norms such as Indonesian PII law, GDPR, CCPA etc.
• Ability to communicate risks in business context and articulate mitigation strategies & metrics to senior stakeholders.

Skills:

• Have knowledge of security concepts, protocols, and best practices relevant to application development and deployment.
• Familiarity with OWASP Top 10 and other common vulnerabilities.
• Operational Management
• Software Engineering
• IT Security Management
• Telco Knowledge
• Strong verbal and written communication skills (fluency in English is required)
• Strong interpersonal and communication skills with a proven ability to collaborate with cross-functional teams, including IT, Security, Compliance, and Legal.
• Strong analytical skills to identify security risks, assess their potential impact, and devise effective solutions.
• Good communication skill both writing and verbally to be able to work together with all employees in the company.
• Ability to convey message in clear, concise and simple way to various employees in the company.
• Ability to deliver and develop presentation in front of different audience and answering their questions.
• Have integrity, confidentiality, and independence.
• Collaboration and Teamwork: Ability to collaborate with cross-functional teams, especially with development and IT teams, to integrate security into the software development life cycle.
• Project Management: Project management skills to plan, execute, and monitor security initiatives effectively.