Job description for Manager Cyber Security at PT PILARI TECH INDONESIA
About the Role
The company is strengthening cybersecurity governance across all business lines. The Cyber Security Manager will lead the cyber security function, from risk assessment and control design to incident readiness. This role works closely with the IT Division, Risk Management Division, and the steering committee, and reports regularly to management on the company's cybersecurity posture.
Key Responsibilities
- Lead cybersecurity readiness and maturity assessments across all business units
- Develop and maintain cybersecurity policies, standards, and procedures aligned with NIST CSF 2.0 and ISO/IEC 27001
- Manage the cybersecurity risk register together with the Risk Management Division
- Oversee security architecture reviews for critical systems and applications
- Coordinate vulnerability management, including penetration tests with external vendors
- Prepare and test incident readiness (incident response plan, tabletop exercises), including coordination with the CSIRT
- Map team roles and competencies against the NICE Framework
- Prepare regular reports on cybersecurity control implementation for management
- Coach and develop the functional team (Cyber Security Specialist, IT Governance Officer)
Qualifications
- Minimum Bachelor's degree in Informatics Engineering, Information Systems, or a related field
- Minimum 7 to 10 years of experience in cybersecurity or IT governance, with at least 3 years in a managerial role
- Strong understanding of the NIST Cybersecurity Framework, ISO/IEC 27001, and GRC (Governance, Risk, Compliance) practices
- Good communication skills for engaging with management, steering committees, and technical teams
- Certifications such as CISM, CISSP, or ISO 27001 Lead Implementer/Auditor are preferred
Nice to Have
- Experience in state-owned enterprises or Testing, Inspection, Certification (TIC) companies
- Experience establishing or registering a CSIRT with a national cybersecurity authority
- Experience leading cross-business-unit cybersecurity transformation programs
