Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 9 days ago

IT Security Operations Lead

fwd204 open roles

Where
Indonesia - Jakarta - Pacific Century Place
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIT Security Operations Leadfwd · Indonesia - Jakarta - Pacific Century Place

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on fwd's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.8% of postings close within 7 days. Measured by our own scanner across the market. fwd postings stay open a median of 7 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.8%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: posted 9 days ago

fwd median: 7 days open

The posting

About FWD Group

FWD Group (1828.HK) is a pan-Asian life and health insurance business that serves approximately 40 million customers across 10 markets, including BRI Life in Indonesia. FWD’s customer-led and tech-enabled approach aims to deliver innovative propositions, easy-to-understand products and a simpler insurance experience. Established in 2013, the company operates in some of the fastest-growing insurance markets in the world with a vision of changing the way people feel about insurance. FWD Group is listed on the main board of the Hong Kong Stock Exchange under the stock code 1828.

For more information, please visit www.fwd.com

PT FWD Insurance Indonesia (“FWD Insurance”), a joint-venture insurance company and a part of FWD Group, previously known as PT Commonwealth Life, has successfully merged with PT FWD Life Indonesia (“FWD Life”) as of 1 December 2020 and will be known as FWD Insurance.

The merger of FWD Life and FWD Insurance has led to a more comprehensive range of products, including unit-linked insurance, individual & group term life insurance, individual & group personal accident insurance, and group medical insurance through technology driven-distributions such as agency, bancassurance, e-commerce, and corporate.

FWD Insurance is registered and supervised under Otoritas Jasa Keuangan (“OJK”).

FWD Insurance is a member of Indonesia Financial Services Alternative Dispute Resolution Center.

IT security operation Lead to ensure security practices are deployed and aligned. The increasing threats on information security & governance, has put pressure on IT to ensure continuity while serving the complex business needs. Support assigned Local or group IT Security Operation.

Job Purpose

IT security operation Lead to ensure security practices are deployed and aligned. The increasing threats on

information security & governance, has put pressure on IT to ensure continuity while serving the complex

business needs. Support assigned Local or group IT Security Operation.

Key Responsibilities

• Lead the SecOps team (2 NFTE) in daily activities related to Internal Vulnerability Management (IVM),

monitor and oversee progress, and coordinate results and issues with BISO.

• Lead the SecOps team (2 NFTE) in daily activities related to External Vulnerability Management (EVM),

monitor and oversee progress, and coordinate results and issues with BISO.

• Lead the SecOps team (2 NFTE) in daily activities related to Security Configuration, monitor and

oversee progress, and coordinate results and issues with BISO.

• Lead the SecOps team (2 NFTE) in daily activities related to Web Application Firewall (WAF), monitor

and oversee progress, and coordinate results and issues with BISO.

• Lead the SecOps team (2 NFTE) in daily activities related to Cloud Security, monitor and oversee

progress, and coordinate results and issues with BISO.

• Lead the SecOps team (2 NFTE) in daily activities related to Endpoint Compliance, monitor and

oversee progress, and coordinate results and issues with BISO.

• Lead the SecOps team (2 NFTE) in daily activities related to Threat Intelligence Alerts, monitor and

oversee progress, and coordinate results and issues with BISO.

• Lead the SecOps team (2 NFTE) in daily activities related to Incident Handling, monitor and oversee

progress, and coordinate results and issues with BISO.

• Lead the SecOps team (2 NFTE) in daily activities related to Patch Advisory, monitor and oversee

progress, and coordinate results and issues with BISO.

• Lead the SecOps team (2 NFTE) in daily activities related to DLP Alerts & Whitelisting Email and Web,

monitor and oversee progress, and coordinate results and issues with BISO.

• Lead the SecOps team (2 NFTE) in daily activities related to Phishing Simulation, monitor and oversee

progress, and coordinate results and issues with BISO.

• Lead the SecOps team (2 NFTE) in daily activities related to Mandatory Training & Handbook Sign,

monitor and oversee progress, and coordinate results and issues with BISO.

• Lead the SecOps team (2 NFTE) in daily activities related to IAM and CyberArk PIDs, monitor and

oversee progress, and coordinate results and issues with BISO.

• Lead the SecOps team (2 NFTE) in daily activities related to User Access Matrix (UAM) and User

Access Review (UAR), monitor and oversee progress, and coordinate results and issues with BISO.

• Lead the SecOps team (2 NFTE) in daily activities related to Patching Management, monitor and

oversee progress, and coordinate results and issues with BISO.

• Lead the SecOps team (2 NFTE) in daily activities related to Production Issues, monitor and oversee

progress, and coordinate results and issues with BISO.

• Lead the SecOps team (2 NFTE) in daily activities related to Update Asset Inventory, monitor and

oversee progress, and coordinate results and issues with BISO.

• To consult and coordinate all SecOps team activities with Group Information Security functions based

on guidance from BISO.

• Key Qualifications

• Minimum 10 years of experience in IT Security.

• Bachelor’s Degree in Information Technology or a related field.

• Proficient in using and operating Zscaler, CyberArk, Qualys, Orca, iTunes, ManageEngine, Blackkite,

and CrowdStrike.

• Strong knowledge in incident detection, analysis, response, and remediation of security events.

• Experience in engineering, configuration, and troubleshooting of security systems.

• Familiarity with ISO 27001 is an advantage.

• Good understanding of endpoint protection, including servers, laptops, PCs, and firewalls.

• Strong knowledge of Next-Generation Firewalls (NGFW), Security Information and Event Management

(SIEM), and Web Application Firewalls (WAF).

FWD Core Competencies

Proactive

• Be positive: Operate with a “can do” mindset

• Think ahead: Anticipate needs and empowered to take action without waiting to be told what to do

• Continuous Improvement: Seek out ways to raise the bar

Innovative

• Dare to be different: Find unique and creative solutions by thinking out of the box

• Be adaptive: Open to new ideas and embrace change

• Be ambitious: Take calculated risks, seize opportunities to learn and grow from failure

Committed

• Deliver on our promises: Follow through on commitments and meet deadlines

• Be the best we can be: Strive for high-quality work and persevere to stay focused

• Celebrate teamwork: Work collaboratively to achieve more

Caring

• Demonstrate customer-led approach: Prioritise customer needs and deliver exceptional value

• Seek to understand: Listen with empathy and consider diverse perspectives

• Treat everyone with respect: Use polite language, a courteous tone and embrace Diversity, Equity

& Inclusion (DEI)

Open

• Be transparent: Share knowledge to empower others and foster trust

• Make the right decisions: Involving others, manage and mitigate risks and be decisive

• Champion integrity and ethics: Consider the impact of your actions and speak up when you feel

something is wrong

Competencies

• Vulnerability Management

Page: 3 of 3

• CEH Certification

• Information Security Operation

• Patch Management

• Endpoint compliance

• ISO270001

• Incident Handling

• Internal/External Audit

Performance Indicators

• 4 Key Risk Indicators (KRIs) of Cybersecurity from Group Information Security (GIS) are reported in the

monthly GIS Management Report, with most KRIs consistently maintained at Low Risk.

• Implementation of cybersecurity tools and initiatives to strengthen the organization’s security posture.

• Endpoint protection: Daily updates of antivirus databases to ensure up-to-date threat defence.

• Real time 24/7 Monitoring of Security Information & Event Management

• Full protection of FWD systems' availability, confidentiality, and integrity from external compromises.

• Support for all operational processes to maintain quality and service levels for IDBU customers and

stakeholders.

• Timely resolution of all open cyberattack events to minimize impact and restore normal operations.

• Closure of all cybersecurity-related audit findings in a timely and compliant manner.

Reporting & Collaboration

• Head of Security & Governance (BISO)

• Information Security Group Officer

• Metrics, Reporting & Analytics

• Internal Audit

• IT Infrastructure

• Service Desk

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against fwd's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on fwd's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    fwd's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.