Head of Information Security

Techconnect; Jakarta Pusat; On-site; IDR 1,800,000,000 - 3,500,000,000; Full time

Job summary

Techconnect is seeking a Head of Information Security to define and lead the enterprise cybersecurity strategy, ensuring protection of information assets and digital platforms.

The role aligns security posture with corporate goals and regulatory requirements while guiding the organization through evolving threats.

Qualifications

• Security leadership with 10–15 years of enterprise experience.
• Proficiency in ISO 27001 / NIST, threat and vulnerability management, incident response.
• Strong regulatory exposure including OJK and data protection.

Responsibilities

• Define and lead the enterprise cybersecurity strategy.
• Establish governance, policies, controls across IT and operations.
• Communicate risk to the Board and align security with business objectives.

Skills

Security leadership

ISO 27001 / NIST

Regulatory compliance

Security architecture

Crisis management

Job description

1. 1. The Head of Information Security is responsible for defining and leading the enterprise cybersecurity strategy to protect the organization’s information assets, digital platforms, and operational infrastructure. The role ensures security posture aligns with corporate objectives, regulatory requirements, and evolving threat landscapes.
2. 2. This role establishes and enforces cybersecurity governance frameworks, policies, and controls across IT and operational environments. This includes oversight of risk management, security architecture, incident response, data protection, identity and access management, third party security, and business continuity planning.
3. 3. Strategically, this role strengthens organizational resilience by embedding a risk-aware security culture, enhancing threat intelligence capabilities, and ensuring proactive defense mechanisms. The role serves as a trusted advisor to executive leadership and the Board, providing transparency on cyber risks and ensuring security functions as a business enabler rather than a constraint to innovation and growth.

1. 1. Security Leadership: 10–15 years leading enterprise cybersecurity in complex, multi-entity environments
2. 2. Technical & Risk Expertise: ISO 27001 / NIST, threat & vulnerability management, incident response
3. 3. Regulatory Knowledge: Strong compliance exposure (incl. OJK, data protection)
4. 4. Architecture Capability: Cloud, network, application, and IT/OT security across industries
5. 5. Executive & Crisis Handling: Clear Board communication and effective incident leadership