Chief IT Security & Compliance Leader

PT Hubexo Asia Indonesia; Jakarta Utara; On-site; IDR 600,000,000 - 1,800,000,000; Full time

Benefits offered by this job

Medical

Sports

Vision

Miscellaneous allowance

Parking

Annual Leave

Birthday Leave

Charity Day Leave

Job summary

Hubexo is seeking an experienced Head of IT Security to lead security, IT operations and compliance across the business. This hands‑on leadership role will set the security strategy and roadmap, drive risk management and coordinate ISO 27001 and SOC 2 audits, while overseeing vendor security, incident response and cloud security across AWS and Azure.

You will work with senior stakeholders, build security awareness, manage budgets and ensure secure‑by‑default configurations across Microsoft 365,

Qualifications

• 8+ years of IT security and IT operations experience.
• At least 3 years in a security or IT leadership role.
• Experience delivering ISO 27001 certification and/or SOC 2 attestation.
• Hands-on with a compliance automation platform (Vanta preferred).
• Proven in leading security incidents from detection to resolution.
• Experience managing third-party security assessments.
• Experience scoping and managing penetration tests and remediation.
• Experience managing an outsourced SOC or MDR provider.
• Strong knowledge of Microsoft 365, Entra ID, endpoints and cloud (AWS/Azure).
• Excellent communication and stakeholder management.

Responsibilities

• Define Hubexo's information security strategy, roadmap and risk management approach.
• Report security posture, risks and compliance to senior leadership.
• Build security awareness and manage security budget, tooling and suppliers.
• Lead IT Operations across end‑user computing, identity and access management, devices and core infrastructure.
• Ensure secure‑by‑default configurations across Microsoft 365, endpoints and SaaS platforms.
• Oversee IT service levels, patching, backup and secure onboarding of new systems.
• Own incident response plans, playbooks and escalation processes.
• Lead security incidents from triage to root cause analysis and lessons learned.
• Lead ISO 27001 certification and SOC 2 attestation, including audits and remediation.
• Own Vanta for compliance monitoring, evidence collection and control management.
• Maintain ISMS and support customer security questionnaires and audits.
• Lead vendor security assessments and collaborate with Procurement/Legal.
• Track remediation and risk acceptance for third‑party security issues.
• Own penetration testing and vulnerability management programmes.
• Manage external testing providers and drive remediation with tech teams.
• Establish clear remediation priorities and timelines based on risk.
• Manage external SOC provider, SLAs, monitoring and escalations.

Skills

Security leadership

Incident response

Vendor security

ISO 27001

SOC 2

Risk management

M365

Cloud security

Entra ID

Audits

Tools

Vanta

Drata

Secureframe

Job description

Hubexo is seeking an experienced Head of IT Security to lead security, IT operations and compliance across the business. This hands‑on leadership role will set the security strategy and roadmap, drive risk management and coordinate ISO 27001 and SOC 2 audits, while overseeing vendor security, incident response and cloud security across AWS and Azure.

You will work with senior stakeholders, build security awareness, manage budgets and ensure secure‑by‑default configurations across Microsoft 365,