Information Security Team Supervisor

About the role

ALJ, a financial services company founded in 1945 and the largest independent distributor of the Toyota Group, is looking for an Information Security Team Supervisor. The role takes an active part in managing and continuously improving the company's IT infrastructure, network operations, cybersecurity and information security governance, ensuring the security, reliability and continuity of IT systems and networks while managing security risks and regulatory compliance.

Key responsibilities

• Design, manage and improve the IT infrastructure, system architecture and network topology, and monitor performance and infrastructure changes
• Manage network services, operators and third-party providers according to agreed SLAs, and oversee procurement, inventory, backup and budget
• Define and implement cybersecurity architectures, policies and controls, including firewall, IDS/IPS, antivirus, DLP and SIEM solutions
• Ensure access management, security monitoring, vulnerability management and timely remediation of risks
• Manage security incidents, coordinate responses and report to the Information Security Committee
• Develop and maintain information security policies, procedures and the ISO 27001 ISMS, and coordinate risk assessments, asset inventory and security tests
• Ensure security requirements are integrated into IT projects, infrastructure changes and software development
• Ensure compliance with BDDK regulations, manage independent information systems audits, and prepare and test business continuity and disaster recovery plans
• Lead the team, manage vendor relationships and collaborate with IT, Risk, Operations, Legal and Compliance teams

Required profile

• At least 8 years of experience in IT security and network management
• Advanced written and spoken English
• Experience in vulnerability management, security monitoring, access management and incident response
• Knowledge of ISO 27001 ISMS and familiarity with BDDK regulations and information systems audit requirements, preferably in financial services
• Leadership, project management and stakeholder management skills, with analytical thinking and a proactive approach

Required skills

• Network architecture, infrastructure management and network security
• Firewall, IDS/IPS, Antivirus, DLP and SIEM
• Business continuity and disaster recovery processes

What we offer

• Hybrid working: office for 10 days a month
• Private health insurance and life insurance
• Paid leaves including birthday, first day of school and 15 days of advance leave in the first year
• A global orientation program with an assigned buddy