• Leading and managing the Information Security team, which includes IT Support, IT Security, and IT Governance, Risk, and Compliance functions.• Foster a culture of security awareness and accountability within the organization.• Develop and implement comprehensive information security strategies, policies, standards, and procedures to protect the organization's data, systems, and networks.• Conduct risk assessments and vulnerability scans to identify security gaps and prioritize remediation efforts.• Involved in performing security assessments on developed or improved in-house systems and third-party services.• Coordinate with IT Support and IT Security teams to ensure timely resolution of security incidents and service requests.• Implement security monitoring tools and technologies to detect and mitigate threats.• Ensure compliance with relevant laws, regulations, and industry standards (e.g., GDPR, ISO 27001, Undang-Undang Perlindungan Data Pribadi).• Lead efforts to achieve and maintain industry certifications and attestations.• Collaborate with the Governance, Risk, and Compliance team to conduct audits and assessments, as well as to address findings and recommendations.• Develop and deliver security awareness programs and training sessions for employees at all levels.• Promote best practices for data protection, privacy, and cybersecurity hygiene.

* Directly responsible to establish and maintain company-wide policies, procedures, guidelines, and control related to information security to assure compliance with applicable regulatory and legal requirements as well as good business practices.* Establish and oversee formal risk assessment program for various information systems, services and processes.* Involved in performing security assessments on developed or improved in-house systems and third-party services.* Research, initiate, and ensure compliance with ISO/IEC 27001:2013 and other related industry compliance.* Act as Subject Matter Expert (SME) for trending GRC and Information Security topics.* Liaise with Operation Division, IT Infrastructure, HR Division, and also with Koltiva client (multinational company) to re-mediate new and outstanding issues; track security-related issues in the Koltiva system.* Develop, promote, and monitor our corporate-wide information and security awareness program.* Collaborate with related business units to ensure the policies, procedures, and control implementation.* Maintain expertise on security trends through training, research, and development in order to mitigate potential security exposures.* Train other staff and external clients for security awareness as necessary.

* Directly responsible to establish and maintain company wide policies, procedures, guidelines and control related to information security to assure compliance with applicable regulatory and legal requirement as well as good business practices.* Establish and oversee formal risk assessment program for various information systems, services and processes.* Involved in performing security assessment on developed or improved in-house systems and third party services.* Research, initiate, and ensure compliance with ISO/IEC 27001:2013 and other related industry compliance.* Act as Subject Matter Expert (SME) for trending GRC and Information Security topics.* Liaise with Operation Division , IT Infrastructure, HR Division and also with Koltiva client (multinational company) to re mediate new and outstanding issues; track security-related issues in Koltiva system.* Develop, promote and monitor our corporate wide information and security awareness program.* Collaborate with related business units to ensure the policies, procedure, and control implementation.* Maintain expertise on security trends through training, research, and development in order to mitigate potential security exposures.* Train other staff and external client for security awareness as necessary.

• Leading and Managing Information Security Department• Implement and maintain Information Security Management System (ISMS) standards and card payment security standards, i.e. PCI DSS, Visa/MasterCard, and local bank standard as well (NSICCS)• Assist Security Manager in maintain organization’s effectiveness and efficiency by defining, delivering, and supporting strategic plans for implementing information security technologies• Lead a team to ensure compliance of the Operational processes towards information security standards and regulations• Ensuring the financial objectives is adhered to security budget by forecasting requirement, preparing an annual budget, scheduling expenditures, analyzing variances• Perform internal and external audit and be the counterpart of external auditors in regards to the compliance• Coordinate with IT department to ensure compliance of regulatory requirements on IT security and achieve certifications in the personalization bureau• Conduct investigation and reporting on matters related to security breach and implement preventive controls• Plan and organize regular Internal & External Penetration Testing and Vulnerability Scan in regards to the compliance• Ensure Security documentations, checklist, and production forms are timely updated• Plan and organize regular internal security training and briefing to staff on security awareness

• Perform internal and external audit and be the counterpart of external auditors in regards to the compliance• Ensuring security documentation is recorded and maintained in a proper and timely manner• Giving training to all employees about updated IT & Security policies and procedures (i.e. Security awareness, IT Security Policy, Clean Desk Policy, etc)• Socialize to ensure security policy, procedures, standards, and baselines are implemented properly in day to day operations.• Report on security issues and action status to Security Manager• Operate and maintain the security system to ensure their functionality at all times

• Support client to implementation production phase (SIT, UAT, GO-Live Production)• Be responsible for the smoothly production running regarding data and machines• Managing the smooth running day-to-day business operations including monitoring, identifying, and resolving technical problem• Responsible of customer data and critical system in the generation and production process• Be responsible to lead and coordinate with another production team for new product or project in the plant.

• Assist and coordinate new product or project regarding data production and setup machine in the customer site• Provide training in the customer site with new or modify production process and procedure implementation• Identify and giving a solution to the customers about any problems relating to the product, process and quality system• Be responsible for the smoothly production running in the customer site regarding data and machines

- To identify and giving a solution to the customers about any problems relating to the product & process and to activate the prepaid and postpaid cards relating to the product.