At PT XLSMART Telecom Sejahtera Tbk, I established the enterprise penetration-testing governance policy and built its Power Automate intake system, scaling throughput from 4–5 to as many as 18 parallel requests per week. I used utilization analysis to quantify wasted capacity and secure a CISO budget reallocation.
I’m also the system owner of enterprise Saviynt identity governance across the post-merger entity, and I built a User Access Review framework that closed all 14 access audit findings within one quarter, with zero repeats since. Earlier, I established access governance at GovTech Edu, consolidated vulnerability findings at PT GoTo (Gojek Tokopedia), and created PT Bukalapak.com’s first pentest prioritization framework. I’m CISA-certified.

