Chief Information Security & Privacy Leader

Amartha; Jakarta Selatan; On-site; IDR 900,000,000 - 1,400,000,000; Full time

Job summary

Amartha, a fintech platform in Indonesia, seeks a Head of Information Security to shape and drive security, privacy, and cloud resilience across the business. You will lead governance, risk, and protection efforts, overseeing Red/Blue teams, IAM, and Security Engineering to safeguard financial platforms and customer data.

You will partner with executives to report risk, align with OJK/BI, and advance ISO 27001/27701, SOC 2, and NIST CSF programs while embedding security into product development

Qualifications

• 12+ years in information security, with 5+ years in senior leadership.
• Experience in financial services/fintech risk governance and regulatory guidance.
• Hands-on familiarity with cloud-native security, containers, and CI/CD controls.
• Strong ability to translate security risk into business language for executives.

Responsibilities

• Define and execute a comprehensive information security and data privacy strategy.
• Lead multi-disciplinary security teams across GRC, Red/Blue, and Data Privacy.
• Ensure regulatory compliance (OJK, BI) and certifications (ISO 27001/27701, SOC 2, NIST CSF).
• Oversee security operations, incident response, and threat management.
• Drive security culture, awareness, and secure product lifecycles across org.

Skills

Strategic leadership

GRC & Data Privacy

Cloud security

DevSecOps

Threat intelligence

Regulatory alignment

Budget management

Mentoring & team development

Board-level communication

Security governance

Education

Bachelor’s or Master’s degree in Computer Science / IT / Cybersecurity

Certifications: CISM, CISSP, CISA, CRISC, CIPP/E, CDPSE, CCSP

Tools

ISO 27001

ISO 27701

NIST CSF

SOC 2

PCI-DSS

GDPR

UU PDP

IAM / PAM

EDR/XDR

Job description

Amartha, a fintech platform in Indonesia, seeks a Head of Information Security to shape and drive security, privacy, and cloud resilience across the business. You will lead governance, risk, and protection efforts, overseeing Red/Blue teams, IAM, and Security Engineering to safeguard financial platforms and customer data.

You will partner with executives to report risk, align with OJK/BI, and advance ISO 27001/27701, SOC 2, and NIST CSF programs while embedding security into product development