Deskripsi Pekerjaan

Design and develop the organization's information security policies. Establish short-term and long-term security strategies aligned with business goals. Ensure security policies comply with relevant business requirements, industry standards, and regulatory frameworks. Safeguard the integrity, confidentiality, and availability of internal company data. Monitor and control the security of data shared with third parties or external stakeholders. Implement access controls, data classification, and encryption mechanisms to protect sensitive information. Conduct regular risk assessments on systems, applications, and data assets. Ensure compliance with international standards and regulations such as ISO/IEC 27001, GDPR, and other applicable frameworks. Prepare audit reports and provide actionable recommendations to improve security posture. Continuously monitor systems and networks for suspicious activities or security breaches. Manage and investigate security incidents, including digital forensic analysis when necessary. Develop and maintain incident response and disaster recovery plans to restore operations effectively. Collaborate with IT, legal, operations, and other departments to ensure a holistic security approach across the organization. Conduct regular training and awareness programs to promote a strong security culture among employees.