Head of Information Security

TechConnect GmbH; Jakarta Pusat; On-site; IDR 4,000,000,000 - 8,000,000,000; Full time

Job summary

TechConnect GmbH in Jakarta seeks a Head of Information Security to define and lead the enterprise cybersecurity strategy protecting information assets, platforms, and operations. You will align security with business goals, regulate governance, and drive resilience across IT and OT environments.

You will report to the executive leadership and Board, communicate risk transparently, and embed a proactive, risk-aware security culture that enables innovation and growth.

Qualifications

• Leadership of enterprise cybersecurity programs and teams.
• Experience with ISO 27001 / NIST frameworks and threat management.
• Strong regulatory exposure including data protection requirements.
• Cloud, network, and application security architecture across IT/OT.
• Clear board-ready communication and crisis management capabilities.

Responsibilities

• Define and lead the enterprise cybersecurity strategy across the organization.
• Establish and enforce governance frameworks, policies, and controls.
• Oversee risk management, incident response, data protection, IAM, and third-party security.
• Drive security architecture across cloud, network, and applications.
• Report security posture and enable business growth with proactive measures.

Skills

Security Leadership

Technical & Risk

Regulatory Knowledge

Architecture Capability

Executive & Crisis Handling

Job description

Description

The Head of Information Security is responsible for defining and leading the enterprise cybersecurity strategy to protect the organization’s information assets, digital platforms, and operational infrastructure. The role ensures security posture aligns with corporate objectives, regulatory requirements, and evolving threat landscapes. This role establishes and enforces cybersecurity governance frameworks, policies, and controls across IT and operational environments. This includes oversight of risk management, security architecture, incident response, data protection, identity and access management, third party security, and business continuity planning. Strategically, this role strengthens organizational resilience by embedding a risk-aware security culture, enhancing threat intelligence capabilities, and ensuring proactive defense mechanisms. The role serves as a trusted advisor to executive leadership and the Board, providing transparency on cyber risks and ensuring security functions as a business enabler rather than a constraint to innovation and growth.

Requirements

• Security Leadership: 10-15 years leading enterprise cybersecurity in complex, multi-entity environments
• Technical & Risk Expertise: ISO 27001 / NIST, threat & vulnerability management, incident response
• Regulatory Knowledge: Strong compliance exposure (incl. OJK, data protection)
• Architecture Capability: Cloud, network, application, and IT/OT security across industries
• Executive & Crisis Handling: Clear Board communication and effective incident leadership