Head of Information Security

Noraa & Co.; Daerah Khusus Ibukota Jakarta; On-site; IDR 800,000,000 - 1,200,000,000; Full time

Job summary

Noraa & Co. is looking for a Head of Information Security to develop and lead the cybersecurity strategy for a major public company in Indonesia. In this role, you will take charge of the security architecture and operational practices supporting large-scale business operations.

The ideal candidate will have extensive technical expertise in cybersecurity and experience with governance and risk management. Strong leadership skills are essential as you will mentor a team of security engineers and enhance the organization's security culture.

Qualifications

• Strong hands-on technical background in cybersecurity.
• Deep understanding of application security, infrastructure security, cloud security.
• Experience in securing large-scale or mission-critical systems.

Responsibilities

• Define and execute the company's information security roadmap.
• Lead vulnerability management, threat monitoring, incident response.
• Build and lead the information security function.

Skills

Cybersecurity

Application Security

Infrastructure Security

Cloud Security

IAM

Vulnerability Management

Incident Response

Security Architecture

Tools

CISSP

CISM

CEH

OSCP

CCSP

Job description

About the job

Noraa & Co. is partnering with one of the top public companies in Indonesia to build a strong engineering organization as the backbone of the company's future growth.

Our client is entering a major technology transformation phase, where engineering, infrastructure, cybersecurity, database reliability, DevOps, and IT operations will play a critical role in supporting large-scale business operations across Indonesia.

We are currently hiring for several strategic and senior technical positions.

Position Overview

As the Head of Information Security, you will lead the company's cybersecurity strategy, architecture, and execution. This is a highly technical leadership role, suitable for someone who can operate beyond policy and governance and actively challenge, review, and improve security architecture across engineering, infrastructure, and business systems.

Responsibilities

1. Security Strategy & Architecture
   • Define and execute the company's information security roadmap.
   • Lead security architecture across application, infrastructure, cloud, network, endpoint, and identity systems.
2. Technical Security Leadership
   • Review system designs, identify security risks, and provide practical technical recommendations.
   • Embed security practices into engineering, DevOps, infrastructure, and IT operations.
3. Security Operations
   • Lead vulnerability management, threat monitoring, incident response, penetration testing, and remediation.
   • Improve detection, response, and security control effectiveness.
4. Governance & Risk Management
   • Develop policies, standards, procedures, and security controls.
   • Ensure compliance with internal and external security requirements.
5. Team Leadership
   • Build and lead the information security function.
   • Mentor security engineers and improve organizational security awareness.

Qualifications

• Strong hands‑on technical background in cybersecurity.
• Deep understanding of application security, infrastructure security, cloud security, IAM, SIEM, SOC, vulnerability management, and incident response.
• Able to review technical architecture and challenge engineering decisions from a security perspective.
• Experience securing large‑scale or mission‑critical systems.
• Certifications such as CISSP, CISM, CEH, OSCP, CCSP, or equivalent are a plus, but technical depth is the main priority.