Chief IT Security & Compliance Leader

Hubexo; Jakarta Pusat; On-site; IDR 1,200,000,000 - 1,800,000,000; Full time

Job summary

Hubexo is seeking a hands-on Head of IT Security in Jakarta to own our security posture end to end—covering day-to-day IT operations, identity management, incident response and third-party risk. You will be the accountable leader for audit readiness and customer trust.

In this leadership role you’ll define the security strategy and roadmap, manage audits (ISO 27001 / SOC 2), oversee vendor security, penetration testing, and external SOCs, and drive secure platform migrations across the business.

Qualifications

• 8+ years in IT security and/or IT operations, including at least 3 years leading a security/IT function.
• ISO 27001 certification and/or SOC 2 attestation experience.
• Hands-on with compliance automation platforms (Vanta preferred).
• Experience leading security incidents from identification to resolution.
• Experience establishing vendor/third-party security assessments.

Responsibilities

• Define Hubexo's information security strategy, roadmap and risk management approach.
• Report security posture, risks and compliance to senior leadership.
• Build security awareness and manage budget, tooling and suppliers.
• Lead IT Operations across end-user computing, identity and access management, devices and core infrastructure.
• Ensure secure-by-default configurations across Microsoft 365, endpoints, networks and SaaS platforms.
• Oversee IT service levels, patching, backup, recovery and secure onboarding of new systems.
• Own incident response plans, playbooks and escalation processes.
• Lead ISO 27001 certification and SOC 2 attestation, including audits and remediation.
• Lead vendor security assessments and coordinate with Procurement and Legal.
• Oversee penetration testing and vulnerability management with external providers.

Skills

Security leadership

ISO 27001

SOC 2

Incident response

Vendor security assessments

Penetration testing

SOC/MDR management

Cloud and identity security

Stakeholder management

SaaS security

SaaS integrations

Data protection & GDPR

CISSP/CISM

Cyber Essentials Plus

Tools

Vanta

Drata

Secureframe

Job description

Hubexo is seeking a hands-on Head of IT Security in Jakarta to own our security posture end to end—covering day-to-day IT operations, identity management, incident response and third-party risk. You will be the accountable leader for audit readiness and customer trust.

In this leadership role you’ll define the security strategy and roadmap, manage audits (ISO 27001 / SOC 2), oversee vendor security, penetration testing, and external SOCs, and drive secure platform migrations across the business.