About Me.
Introduction
I'm Rizky Aditya, a cybersecurity professional based in South Jakarta, Indonesia, working across Governance, Risk & Compliance (GRC), Offensive Security, and Security Operations. I help organizations build security programs that hold up under audit and under attack.
On the governance side, I deliver ISO/IEC 27001, 27701, and 42001 consulting — from gap analysis through certification — alongside risk assessments, SoA development, and UU PDP compliance advisory. On the offensive side, I conduct web application, mobile, and API penetration tests following OWASP and PTES methodology. On the blue team side, I have hands-on experience deploying and operating SIEM environments, building detection rules, and coordinating incident response for clients in banking, healthcare, and critical infrastructure.
I hold Lead Auditor certifications in ISO 27001, 27701, and 42001 from Mastermind Assurance, alongside ISC2 Certified in Cybersecurity and several other professional credentials. Currently contributing to 24+ engagements at Whitesec ID.
Expertise
- ▪ ISO/IEC 27001:2022 Implementation & Certification
- ▪ ISO/IEC 27701 Privacy Information Management
- ▪ ISO/IEC 42001 AI Management System
- ▪ Gap Analysis & Readiness Assessment
- ▪ Risk Assessment & Risk Treatment Plan
- ▪ Statement of Applicability (SoA) Development
- ▪ Security Policy & Procedure Development
- ▪ Internal Audit Support & Evidence Preparation
- ▪ Incident Management & Response Planning
- ▪ Business Continuity & Disaster Recovery Planning
- ▪ Third-Party & Supplier Risk Management
- ▪ Data Protection Impact Assessment (DPIA)
- ▪ UU PDP Compliance Advisory
- ▪ Security Awareness Program Development
- ▪ Asset Management & Information Classification
- ▪ Compliance Monitoring & Continuous Improvement
- ▪ Web Application Penetration Testing
- ▪ Mobile Application Security
- ▪ API Security Testing
- ▪ Vulnerability Assessment
- ▪ OWASP Top 10 Assessment
- ▪ Attack Surface Analysis
- ▪ SIEM Deployment & Configuration (Wazuh / ELK)
- ▪ Threat Detection Rule Development
- ▪ Log Analysis & Alert Triage
- ▪ Security Event Monitoring
- ▪ Endpoint Telemetry Analysis
- ▪ Incident Response Support
- ▪ Linux Security Hardening
- ▪ SOC Operations Support
Certifications