- Safeguard the organization’s sensitive information and ensure the integrity, confidentiality, and availability of its data assets.
- Operating at the intersection of cybersecurity and data management, the analyst is responsible for implementing and monitoring security measures to prevent unauthorized access and data breaches as per mandate by PDP Law.
- Conducting risk assessments, developing and executing security policies and procedures, deploying encryption technologies, and actively participating in incident response initiatives which related with data breaches.
- Collaborate with teams from various departments, stay up to date on emerging security threats, and play a vital role in maintaining compliance with data protection regulations and industry standards.
Security Data Monitoring and Alert Triage
- Monitor audit logs, user activities involving sensitive data access
- Flag anomalies & high risk events, categorize security alerts related to data
- Up-to-date misuse case detection rules & response playbooks
Data Breach Risk Quantification
- Develop data classification schema based on impact of exposure or theft
- Discover where sensitive data resides (databases, data lakes, archives) and calculate $ value at risk for sensitive data on it
- Identify vulnerabilities, weak access controls to prioritize remediation
- Data risk assessment reports and threat models
Data Security Incident Response
- Evaluate logs, user activities for unauthorized data access patterns.
- Perform forensic investigations for suspected data theft or misuse
- Incident reports, forensic audits
Requirements:
- Minimum bachelor’s degree in relevant field (Information Technology / Electrical Engineering /Telecommunication Engineering, Cybersecurity, Computer Science, Communications, Information Security or a related field).
- Have 5+ years’ experience in information security domain specifically focused on data security.
- Proficiency in security protocols, cryptography, authentication, authorization, security vulnerabilities, and remediation techniques. Familiarity with programming languages and frameworks is a plus.
- Proficient in: LINUX, Windows Servers, Unix.
- Strong understanding of all Information Security Domains
- Sound understanding of businesses supported and security principles and policies
- Knowledge of network, system, and application monitoring technologies
- Prior experience in leading forensic investigations of data breaches, unauthorized data access incidents.
- Hands-on technical experience in areas like data loss prevention, database activity monitoring, auditing user access etc
- Strong skills around log analysis, correlating events, identifying anomalies to detect misuse of confidential data.
- Proficiency with data protection tools – encryption, tokenization, masking, vaults etc.
- Strong analytical thinking and attention to details given the complex nature of investigations.
- Programming abilities to analyze user activity data and write scripts to automate monitoring & response.
- Familiarity with regulations around data security and breach disclosure norms such as Indonesian PII law, GDPR, CCPA etc.
- Ability to communicate risks in business context and articulate mitigation strategies & metrics to senior stakeholders.
- Have integrity, confidentiality, and independence.
- Collaboration and Teamwork: Ability to collaborate with cross-functional teams, especially with development and IT teams, to integrate security into the software development life cycle.
- Project Management: Project management skills to plan, execute, and monitor security initiatives effectively.
