Total 4 it manager job vacancies in Legal / Public / Security category in Denpasar, Denpasar City

Security Engineer - IT

As a Security Engineer, you will focus on the problem of keeping our systems safe and protecting our customers while adapting to the high-speed growth of our business and our enormous scale. You will be focusing on keeping interactions on our platform as simplified as possible using advanced engineering to detect and mitigate vulnerabilities and security flaws in Xtremax’s system. The ability to perform systems security or vulnerability analysis and design is a must. 

Responsibilities: 

• Develop a set of security standards and best practices for the organization and recommend security enhancements to management as needed. Develop strategies to respond to and recover from a security breach 
• Set up, configure, and tweak security in all infrastructure systems (System, Server, Network, and Client) 
• Handle, maintain and manage various potential security threats 
• Collaborate with other team members for security design and policy 
• Doing system hardening and penetration testing 
• Doing an internal security audit 
• Handle antivirus and malware protection 
• Doing backup and restore data in our system 
• Documented all internal audit processes, such as patching, update, server access log, VAPT, and backup recovery process 
• Conducts periodic scans of networks to find any vulnerability. They also conduct penetration testing, in which they simulate an attack on the system to highlight or find any weaknesses that might be exploited by a malicious party. 
• Proactive learning, assess and utilize new technologies and concepts with customer requirements 
• Responsibility for educating the workforce on information security through training and building awareness 

• Bachelor’s Degree in Software Engineering / Computer Science / Information Technology / equivalent or relevant work experience. 
• Having good knowledge about security systems and policy 
• Good at managing sensitive and confidential data, workstation devices, patching and upgrading systems, applications, services, and other infrastructure foundational components. 
• Good at planning, developing, and implementing IT security controls that are documented and working properly. 
• Familiar with system hardening and penetration testing 
• Experience handling antivirus and malware protection 
• Familiar with ISO27001 
• Familiar with Linux and Windows OS 
• Familiar with cloud security services such as AWS, Azure, and GCP 
• Able to create some script, i.e., bash, python 
• Love to learn, assess, and utilize new technologies 
• Having certification in cloud security area is a plus 

Security Engineer – Governance 

We are looking for an experienced and knowledgeable IT Security Governance to join our Security Engineer team. You will be responsible for the management and advances of our security policies, standards, and procedures.  

Responsibilities:  

• Ensure the strategy and implementation of information security in accordance with the needs & applicable regulations  
• Develop an information security framework and architecture in accordance with the company's needs  
• Develop and maintain policies, standards, and procedures that support the information security framework in accordance with best practices and applicable regulations.  
• Actively identify, analyze, measure, provide control recommendations, and monitor follow-up on risk control & information security.  
• Carry out regular evaluations of the implementation of IT security management policies, standards, and procedures  

Requirements:  

• Bachelor’s Degree in Software Engineering / Computer Science / Information Technology / equivalent or relevant work experience.  
• Minimum 2 years experiences in IT industry  
• Familiar and able to implement and lead various best practices & regulations for IT Security & Cyber Security such as ISO 27000, CSA Star, CIS, NIST, GDPR, etc.  
• Familiar with Security compliance or assessment tools  
• Having experience implement ISO 27017 and 27018 is a plus point  
• Familiar with cloud environment is a plus point.  

MidPlaza Holding is seeking a skilled and experienced Legal Manager. As the Legal Manager, you will be responsible for overseeing all legal matters for the organization, ensuring compliance with applicable laws and regulations, and providing legal advice and guidance to the management team. You will work closely with internal and external stakeholders, managing contracts and license, resolving disputes, litigation, and supporting business transactions. The ideal candidate will have a strong legal background, excellent communication and negotiation skills, and the ability to handle complex legal issues.

Responsibilities:

• Provide legal guidance and support to senior management and various departments within the organization.
• Advise on legal issues related to corporate governance, compliance, contracts, IPR, employment law, M&A and other areas relevant to the business.
• Draft, review, negotiate, and finalize contracts, agreements, and other legal documents.
• Develop and implement compliance programs, conduct compliance audits and risk assessments to identify potential legal risks and develop strategies to mitigate them.
• Stay updated on changes in relevant laws and regulations to ensure the organization remains compliant.
• Assist with corporate governance matters, including board meetings, annual reports, corporate filings, and compliance with corporate governance best practices.
• Assess potential litigation risks, oversee and manage litigation matters, and develop legal strategies.
• Manage the organization's intellectual property portfolio, including trademarks, patents, copyrights, and trade secrets.
• Conduct intellectual property searches and assist with the registration and enforcement of IPR.
• Provide guidance on employment law matters and ensure compliance with labor laws and regulations.
• Collaborate with other departments to address legal issues and support business initiatives.
• Serve as a liaison between the legal department and other areas of the organization.
• Represent the organization in legal proceedings, negotiations, and interactions with external parties.

• Law degree from reputable school.
• Four to five years of relevant experience at prominent corporate law firms or in-house counsel, preferably in roles involving corporate law, contract negotiation, compliance, and risk management.
• Experience in areas such as mergers and acquisitions, intellectual property, employment law, and regulatory compliance can be beneficial.
• Strong leadership/managerial and communication skills.
• Possess analytical and problem-solving skills as well as understanding of business principles and practices.

• Develop and oversee key performance indicators (KPIs) for security.
• Oversee service level agreements (SLAs) for security operations and create risk-based dashboards for reporting.
• Create and implement a comprehensive vulnerability management program, including managing activities related to vulnerability assessment (VA) and penetration testing (PT).
• Develop and implement security programs for network, server, and cloud environments, including onboarding processes and pre- and post-scanning activities.
• Conduct periodic configuration reviews based on CIS benchmarks.
• Manage the application security program by identifying and mitigating risks in collaboration with business application teams.
• Collaborate in managing the endpoint security, network security, and server security programs.
• Collaborate in managing the overall security operations management program.

• At least 3-5 years of documented work experience in security engineering.
• Prior practical knowledge of web, mobile, and cloud security.
• Hands-on experience in constructing and maintaining security measures such as firewalls, intrusion detection systems, antivirus software, authentication systems, content filtering, etc.
• Thorough understanding of IT infrastructure concepts across all layers, including Servers, Networks, End User Computing, and Cloud.
• Experience in designing and implementing risk-based information security programs.
• Hands-on experience in implementing standards such as ISO 27001, NIST, CIS, or equivalent.
• Hands-on experience in designing, implementing, and managing Data Leak Prevention programs.
• Hands-on experience in conducting application security assessments, both manual and tool-based.
• Gained solid understanding of OWASP, CIS, and NIST guidelines for application security.
• Experience in utilizing anti-malware solutions.
• Experience in designing security programs for cloud services, including IAAS, PAAS, and SAAS.
• Hands-on experience with native cloud security capabilities.
• Experience in implementing cloud security solutions like CASB.
• Excellent communication and presentation skills.
• Experience in collaborating with mid-level and senior-level management, with the ability to understand business processes and requirements.
• Understanding and effectively communicating security risks to core technology teams and business functions.
• Preferred certifications: CISSP, CCSP, CISM, ISO 270001 LI/LA.