Restorasi Ekosistem Riau (RER)

Security Analyst

• Partner closely with IT, compliance, and business stakeholders, as well as external partners, to validate training and control activities.
• Escalate security concerns to management and any designated security lead to help ensure follow-through on corrective actions.
• Escalate findings to appropriate stakeholders and partners to ensure timely remediation and consistent security practices.
• Monitor and triage cybersecurity notifications and threat intelligence (e.g., CISA alerts); document analysis, perform research, and escalate items requiring action.
• Conduct periodic reviews of secure communications/access logs (e.g., Preveil) to identify anomalies; document findings, investigate indicators, and escalate as required.
• Review end-user security awareness training reports for completion and effectiveness; document results and escalate non-participation or high failure rates to management.
• Coordinate with partner organizations to validate equivalent end-user training is occurring; obtain, organize, and retain supporting documentation.
• Initiate and document periodic reviews of security policies and procedures; update policy documentation to reflect current controls, processes, and requirements.
• Plan, facilitate, and document periodic cybersecurity tabletop exercises; track lessons learned and follow-up actions.
• Organize and maintain evidence/artifacts supporting cybersecurity policy implementation and ongoing operational procedures (e.g., audit-ready documentation and process records).

Cybersecurity Analyst