1. Guide IT Operation Manager and Members in security awareness measures such as how to respond Cyber Security threats.2. Identify and advise on potential threats and implement solutions.3. Advise on physical security & cyber security plans for major events such as force majuer or total loss scenario. 4. Advise risk assessments to identify potential threats and vulnerabilities in the workplace, and developing security measures to mitigate them.5. Advise on learning milestone for cyber security in the angle on defender and also in the angle of attacker.

1. Setting company technical vision and leading the company’s technological development2. Developing strategic plans and setting timelines for evaluation, development, and deployment of all technical.3. Ensuring technologies are used efficiently, profitably and securely4. Evaluating and implementing new systems and infrastructure5. Discover and implement new technologies that yield competitive advantage 6. Supervising quality assurance processes, integration, and system tests7. Mentoring team members8. Monitoring performance profiling tools and procedures

1. Improve the achievement and competence of the security team by planning technical solutions; answer technical and procedural questions for less experienced team members; teach better processes; guiding members of the security team.2. Determine security requirements by evaluating business strategies and requirements; examine information security standards; carry out security analysis and system vulnerability and risk assessment; study architecture / platforms; identify integration problems; prepare a cost estimate.3. Plan a security system by evaluating network and security technology; develop requirements for local area networks (LAN), virtual private networks (VPNs), routers, firewalls, and related security and network devices, including the use of certification authorities (CA) and digital signatures as well as hardware and software; adhering to industry standards.4. Implement security systems by establishing intrusion detection tools and methodologies; direction of installation and calibration of equipment and software; prepare preventive and reactive actions; making, transmitting, and maintaining keys; provide technical support; complete documentation.5. Verify security systems by developing and implementing test scripts. Maintain security by monitoring and ensuring compliance with standards, policies and procedures; conduct incident response analysis; develop and conduct training programs.6. Improve security systems by monitoring the security environment; identify security gaps; evaluate and implement improvements.7. Updating work knowledge by tracking and understanding emerging security practices and standards; participate in educational opportunities; reading professional publications; maintain a private network; participate in professional organizations.

1. Lead to build effective IT Security controls, programs, and capabilities to improve the overall IT securty posture of company and keep up with the evolving needs of the business.2. Lead strategic plan for IT Security.3. Ensuring cyber security threats to the company can be minimized.4. Coordinate with team to provide support for the implementation of the fulfillment of security criteria in each IT development / implementation project in accordance with the needs of business users. 5. Manage aspects of IT security and governance the company and business users.6. Perform user matrix reviews regularly7. Perform security awareness to all employee at Head Office and branches.8. Manage incident report and coordinate with related units in response to incidents. 9. Develop internal team.

1. Develop and maintain company IT Governance, Security & Risk Management framework and all relevant policies, standards and procedures based on industry best practice such as ITIL, COBIT, ISO, etc.2. Develop, maintain and drive execution of supporting program/s to continuously improve adoption, awareness and implementation of IT Governance, Security and Risk Management framework in the company.3. Collaborate accross IT departement to implementation and maintain information security roadmap.4. Ensure adequate risk control implementationin all relevant IT operational processes and system setup.5. Provide advance consultancy in area of IT Governance, Security and Risk Management for company IT operation/project in IT and other parties in the company.6. Act as relationship manager for coordination with auditor (internal, external, OJK)7. Provide leadership, resource management and development of IT Governance, Security & Risk Management team.8. Produce regular report (IT Dashboard/Performance) on IT Governance, Security and Risk Management implementation status, issues and supporting programs. 9. Provide direction for all team members and develop competency of team members to ensure they can perform consistently as expected. 10. Perform regular security review access control (employee resign, datacenter, super user)11. Evaluate security controls to ensure information assets are adequately protected.

1. Develop security architecture to protect the confidentiality, integrity and availibility of the organizations information assets against identified threats.2. Assist solution of security architecture and the design of secure information systems.3. Provide general advice and guidance on topics related to information security. 4. Assess the feasibility of new initiatives and emerging information security technologies.5. Make recommendations regarding technologies which have the potential to benefit the security of information assets. 6. Determining security requirements by evaluating business strategies and requirements. 7. Researching information security trends, evaluate and integration into existing architecture.8. Ensure technology direction and architecture consistency.9. Subject matter expert in applied security technology for the Bank.

1. Plan and implement working systems to protect, detect and react to information securityevents.2. Ensure the development of information security architectures.3. Ensuring risk and business impact assessments, developing risk mitigation strategies,enforcing policy and regulatory compliance.4. Drives process and technology to minimize attack surface.5. Advising and making recommendations regarding appropriate personnel, physical andtechnical security controls.6. Understand and reduce threats and vulnerability through regularly Internal VulnerabilityAssessment and mitigation.7. Managing the information security incident management program to ensure the prevention,detection, containment and correction of security breaches.8. Creating an bankwide information security education and awareness campaign.9. Coordinating the communication of the information security awareness campaign to allmembers of the enterprise.10. Coordinating with vendors, auditors, executive management and user departments toenhance information security.

Working in the field of Information Security Vulnerability Assessment with the activity, Penetration Tester, conduct IT security with the topic: Hacking Insight Through penetration testing, Web Hacking & Countermeasures, Log Management & Analysis, Packet Analysis & Network Forenics, Wireless Hacking & Defense, Holistic Information Security.