Cyber Risk & Compliance Leader (In-Country)

AirAsia Indonesia; Tangerang; On-site; IDR 1,500,000,000 - 2,300,000,000; Full time

Benefits offered by this job

Medical & insurance benefits

Paid time off

Career development & training

Flight benefits for Allstars

Job summary

AirAsia Indonesia is seeking a Business Security Manager to lead in-country information security governance, risk, and compliance. You will report to the Group CISO and advise technical teams and staff on ISO27001, PCI DSS, CIS, and NIST CSF requirements while ensuring proper implementation.

You will coordinate with local Data Protection Officers on data security, manage security incidents, and participate in audits and regulatory submissions to protect crown jewels across Indonesia.

Qualifications

• Bachelor's Degree in Information Technology, or Business with IT, Computer Science, or equivalent.
• Minimum 6 years of experience in managing Information Security Governance, Risk Management, and Compliance, Projects/Change Management or related fields.
• Relevant industry certification is an advantage (ISO 27001, CISA, CISSP, CGEIT, etc.)
• Working knowledge of ISO 27001 and PCI-DSS
• Strong communication, analytical, and multitasking abilities.

Responsibilities

• Advise, consult, and raise awareness of Group Information Security requirements to technical teams and employees; ensure implementation.
• Primary contact during information security incidents and responsible for incident management.
• Ensure Indonesia's systems and processes comply with information security standards (ISO 27001, PCI DSS, CIS, NIST CSF, etc.).
• Represent cybersecurity in external audits, customer security reviews, and regulatory submissions.
• Drive governance, risk, and compliance activities and coordinate with in-country Data Protection Officers.

Skills

Information Security Governance

Risk Management

Compliance

Incident Management

Regulatory Knowledge

Security Architecture

Communication Skills

Analytical Thinking

Education

Bachelor's Degree in Information Technology, or Business with IT, Computer Science, or equivalent

ISO 27001

CISA

CISSP

CGEIT

Job description

AirAsia Indonesia is seeking a Business Security Manager to lead in-country information security governance, risk, and compliance. You will report to the Group CISO and advise technical teams and staff on ISO27001, PCI DSS, CIS, and NIST CSF requirements while ensuring proper implementation.

You will coordinate with local Data Protection Officers on data security, manage security incidents, and participate in audits and regulatory submissions to protect crown jewels across Indonesia.