Total 6 it manager job vacancies in Legal / Public / Security category in bandung bandung city

Security Engineer - IT

As a Security Engineer, you will focus on the problem of keeping our systems safe and protecting our customers while adapting to the high-speed growth of our business and our enormous scale. You will be focusing on keeping interactions on our platform as simplified as possible using advanced engineering to detect and mitigate vulnerabilities and security flaws in Xtremax’s system. The ability to perform systems security or vulnerability analysis and design is a must. 

Responsibilities: 

• Develop a set of security standards and best practices for the organization and recommend security enhancements to management as needed. Develop strategies to respond to and recover from a security breach 
• Set up, configure, and tweak security in all infrastructure systems (System, Server, Network, and Client) 
• Handle, maintain and manage various potential security threats 
• Collaborate with other team members for security design and policy 
• Doing system hardening and penetration testing 
• Doing an internal security audit 
• Handle antivirus and malware protection 
• Doing backup and restore data in our system 
• Documented all internal audit processes, such as patching, update, server access log, VAPT, and backup recovery process 
• Conducts periodic scans of networks to find any vulnerability. They also conduct penetration testing, in which they simulate an attack on the system to highlight or find any weaknesses that might be exploited by a malicious party. 
• Proactive learning, assess and utilize new technologies and concepts with customer requirements 
• Responsibility for educating the workforce on information security through training and building awareness 

• Bachelor’s Degree in Software Engineering / Computer Science / Information Technology / equivalent or relevant work experience. 
• Having good knowledge about security systems and policy 
• Good at managing sensitive and confidential data, workstation devices, patching and upgrading systems, applications, services, and other infrastructure foundational components. 
• Good at planning, developing, and implementing IT security controls that are documented and working properly. 
• Familiar with system hardening and penetration testing 
• Experience handling antivirus and malware protection 
• Familiar with ISO27001 
• Familiar with Linux and Windows OS 
• Familiar with cloud security services such as AWS, Azure, and GCP 
• Able to create some script, i.e., bash, python 
• Love to learn, assess, and utilize new technologies 
• Having certification in cloud security area is a plus 

Primary Responsibilities

Security Operation

• Train Security Officers in the operation of surveillance equipment, written reports, record keeping, patrol and first aid procedures
• Disseminate all information by the Management to team members
• Conduct patrols and regular checks on all Security Officers to assure that they are alert and discharging their duties efficiently and effectively
• Conduct all criminal investigations, put up accompanying investigation papers and reports cases which occur within the Hotel
• Conduct surveillance on hotel staff to ensure that they abide by the House Rules; Keep tag on movements of staff who are classified as suspects under investigations
• Control and direct all emergency personnel traffic in response to fire, bomb threat, police assistance, injury or illness
• Inspect all Security equipment to ensure that they are in working order and that all cameras are correctly focused
• Conduct routine day-to-day checks of the following items to ensure that they are properly maintained, issued and accounted for;
  • Pocket books;
  • Security Desk Occurrence Book;
  • Gate Passes and Security Passes;
  • Keys and Key Registers;
  • Post allocation for hotel and External Security
• Cultivate Informers with the intention of obtaining information of security interest that may be of immediate or future use to the Department for prevention and detection purposes
• Record all activities involving the Department in the Daily Security Report
• Provide security coverage for VIP guests
• Update General Manager constantly on all matters of security interest affecting the Hotel and the Department
• Always be on-call, including off-duty hours, for any emergency that may arise

Team Management

• Conduct performance review with the team
• Identify and develop team members with potential
• Constantly monitor team members’ appearance, attitude and degree of professionalism
• Conduct detailed induction programs for new employees
• Develop, conduct maintain all staff training programs for team members, focusing on their development needs, providing them with new skills to meet the changing needs of the business
• Prepare weekly staff schedules keeping in mind anticipated business, operating budgets and standards of service

Other Responsibilities

• Be fully conversant with hotel fire & life safety/emergency procedures
• Comply with hotel and department policies and procedures at all times
• Attend all briefings, meetings and trainings as assigned by management
• Report for duty on time wearing clean and complete uniform at all times
• Maintain a high standard of personal appearance and hygiene at all times
• Perform other reasonable duties assigned by the Management of the Hotel

Main Complexity/Critical issues in the Job

Maintain highest standards of security within the hotel premises. Be vigilant and react fast when situations arise.

Security Engineer – Governance 

We are looking for an experienced and knowledgeable IT Security Governance to join our Security Engineer team. You will be responsible for the management and advances of our security policies, standards, and procedures.  

Responsibilities:  

• Ensure the strategy and implementation of information security in accordance with the needs & applicable regulations  
• Develop an information security framework and architecture in accordance with the company's needs  
• Develop and maintain policies, standards, and procedures that support the information security framework in accordance with best practices and applicable regulations.  
• Actively identify, analyze, measure, provide control recommendations, and monitor follow-up on risk control & information security.  
• Carry out regular evaluations of the implementation of IT security management policies, standards, and procedures  

Requirements:  

• Bachelor’s Degree in Software Engineering / Computer Science / Information Technology / equivalent or relevant work experience.  
• Minimum 2 years experiences in IT industry  
• Familiar and able to implement and lead various best practices & regulations for IT Security & Cyber Security such as ISO 27000, CSA Star, CIS, NIST, GDPR, etc.  
• Familiar with Security compliance or assessment tools  
• Having experience implement ISO 27017 and 27018 is a plus point  
• Familiar with cloud environment is a plus point.  

Your team and working environment:

• Our commitment to Diversity & Inclusion:
• We are an inclusive company and our ambition is to attract, recruit and promote diverse talent.

MidPlaza Holding is seeking a skilled and experienced Legal Manager. As the Legal Manager, you will be responsible for overseeing all legal matters for the organization, ensuring compliance with applicable laws and regulations, and providing legal advice and guidance to the management team. You will work closely with internal and external stakeholders, managing contracts and license, resolving disputes, litigation, and supporting business transactions. The ideal candidate will have a strong legal background, excellent communication and negotiation skills, and the ability to handle complex legal issues.

Responsibilities:

• Provide legal guidance and support to senior management and various departments within the organization.
• Advise on legal issues related to corporate governance, compliance, contracts, IPR, employment law, M&A and other areas relevant to the business.
• Draft, review, negotiate, and finalize contracts, agreements, and other legal documents.
• Develop and implement compliance programs, conduct compliance audits and risk assessments to identify potential legal risks and develop strategies to mitigate them.
• Stay updated on changes in relevant laws and regulations to ensure the organization remains compliant.
• Assist with corporate governance matters, including board meetings, annual reports, corporate filings, and compliance with corporate governance best practices.
• Assess potential litigation risks, oversee and manage litigation matters, and develop legal strategies.
• Manage the organization's intellectual property portfolio, including trademarks, patents, copyrights, and trade secrets.
• Conduct intellectual property searches and assist with the registration and enforcement of IPR.
• Provide guidance on employment law matters and ensure compliance with labor laws and regulations.
• Collaborate with other departments to address legal issues and support business initiatives.
• Serve as a liaison between the legal department and other areas of the organization.
• Represent the organization in legal proceedings, negotiations, and interactions with external parties.

• Law degree from reputable school.
• Four to five years of relevant experience at prominent corporate law firms or in-house counsel, preferably in roles involving corporate law, contract negotiation, compliance, and risk management.
• Experience in areas such as mergers and acquisitions, intellectual property, employment law, and regulatory compliance can be beneficial.
• Strong leadership/managerial and communication skills.
• Possess analytical and problem-solving skills as well as understanding of business principles and practices.

• Develop and oversee key performance indicators (KPIs) for security.
• Oversee service level agreements (SLAs) for security operations and create risk-based dashboards for reporting.
• Create and implement a comprehensive vulnerability management program, including managing activities related to vulnerability assessment (VA) and penetration testing (PT).
• Develop and implement security programs for network, server, and cloud environments, including onboarding processes and pre- and post-scanning activities.
• Conduct periodic configuration reviews based on CIS benchmarks.
• Manage the application security program by identifying and mitigating risks in collaboration with business application teams.
• Collaborate in managing the endpoint security, network security, and server security programs.
• Collaborate in managing the overall security operations management program.

• At least 3-5 years of documented work experience in security engineering.
• Prior practical knowledge of web, mobile, and cloud security.
• Hands-on experience in constructing and maintaining security measures such as firewalls, intrusion detection systems, antivirus software, authentication systems, content filtering, etc.
• Thorough understanding of IT infrastructure concepts across all layers, including Servers, Networks, End User Computing, and Cloud.
• Experience in designing and implementing risk-based information security programs.
• Hands-on experience in implementing standards such as ISO 27001, NIST, CIS, or equivalent.
• Hands-on experience in designing, implementing, and managing Data Leak Prevention programs.
• Hands-on experience in conducting application security assessments, both manual and tool-based.
• Gained solid understanding of OWASP, CIS, and NIST guidelines for application security.
• Experience in utilizing anti-malware solutions.
• Experience in designing security programs for cloud services, including IAAS, PAAS, and SAAS.
• Hands-on experience with native cloud security capabilities.
• Experience in implementing cloud security solutions like CASB.
• Excellent communication and presentation skills.
• Experience in collaborating with mid-level and senior-level management, with the ability to understand business processes and requirements.
• Understanding and effectively communicating security risks to core technology teams and business functions.
• Preferred certifications: CISSP, CCSP, CISM, ISO 270001 LI/LA.