Assistant Manager – IT Management & Security

Assistant Manager – IT Management & Security RSM Indonesia is currently seeking a qualified and experienced professional to join our Corporate Information Technology team as Assistant Manager – IT Management & Security. The role is responsible for supporting the effective implementation and administration of the company’s information security, data privacy, risk management, and compliance programs, while ensuring alignment with applicable policies, standards, and regulatory requirements. Key Responsibilities: Maintain IT Management & Security policies, procedures, registers, records, and related documentation. Support the implementation of information security, data privacy, risk management, and compliance programs. Coordinate the collection, review, and maintenance of audit, compliance, and risk management evidence. Support internal and external audits, including monitoring findings and corrective actions. Support activities related to ISO 27001, ISO 27701, and other relevant compliance requirements. Coordinate security, privacy, and third-party assessments, including the preparation and maintenance of supporting documentation. Monitor compliance activities and escalate issues or gaps as appropriate. Organize and facilitate information security, cybersecurity, data privacy, and compliance awareness programs. Support business units in fulfilling information security, privacy, and compliance requirements. Prepare periodic reports, metrics, and dashboards related to IT Management & Security activities. Support IT Management & Security projects and continuous improvement initiatives. Support the preparation and delivery of Security Awareness, Cybersecurity, and Data Privacy Awareness training programs. Qualifications & Requirements: Bachelor’s degree in Information Technology, Computer Science, or a related field. Min. 5 years of professional working experience in Assistant Manager in Information Security, IT Security, IT Risk Management, Data Privacy, Governance, Risk & Compliance (GRC), or a related area. Good understanding of information security, cybersecurity, data privacy, risk management, and compliance principles. Familiarity with ISO 27001, ISO 27701, audit processes, and compliance frameworks. Strong analytical, documentation, coordination, and stakeholder management skills. Excellent communication skills with the ability to work effectively across different business units. Strong attention to detail and ability to manage multiple activities and priorities. Has related certification in IT Management & Security (i.e ISO/IEC 27001, ISO/IEC 27701, CISSP) will be advantages.