Head of Information Security

Techconnect.id; Jakarta Pusat; On-site; IDR 900,000,000 - 1,500,000,000; Full time

Job summary

Techconnect.id in Jakarta seeks a Head of Information Security to define and lead the enterprise cybersecurity strategy protecting information assets, platforms, and operational infrastructure. You will establish governance, risk management, incident response, data protection, IAM, third-party security, and business continuity, aligning with regulatory requirements and board expectations.

The role demands senior leadership, deep technical and regulatory expertise, and the ability to advise

Qualifications

• Must lead enterprise cybersecurity in complex, multi-entity environments.
• Expertise in ISO 27001 / NIST, threat & vulnerability management, incident response.
• Strong regulatory exposure (incl. OJK, data protection).
• Cloud, network, application, and IT/OT security architecture capability across industries.
• Clear Board communication and effective incident leadership.

Responsibilities

• Define and lead the enterprise cybersecurity strategy protecting information assets, platforms, and operations.
• Establish and enforce cybersecurity governance frameworks, policies, and controls.
• Oversee risk management, incident response, data protection, IAM, third-party security, and business continuity.

Skills

Security Leadership

Technical & Risk Expertise

Regulatory Knowledge

Architecture Capability

Executive & Crisis Handling

Job description

1. The Head of Information Security is responsible for defining and leading the enterprise cybersecurity strategy to protect the organization’s information assets, digital platforms, and operational infrastructure. The role ensures security posture aligns with corporate objectives, regulatory requirements, and evolving threat landscapes.

2. This role establishes and enforces cybersecurity governance frameworks, policies, and controls across IT and operational environments. This includes oversight of risk management, security architecture, incident response, data protection, identity and access management, third party security, and business continuity planning.

3. Strategically, this role strengthens organizational resilience by embedding a risk‑aware security culture, enhancing threat intelligence capabilities, and ensuring proactive defense mechanisms. The role serves as a trusted advisor to executive leadership and the Board, providing transparency on cyber risks and ensuring security functions as a business enabler rather than a constraint to innovation and growth.

Requirements

• 1. Security Leadership: 10–15 years leading enterprise cybersecurity in complex, multi-entity environments
• 2. Technical & Risk Expertise: ISO 27001 / NIST, threat & vulnerability management, incident response
• 3. Regulatory Knowledge: Strong compliance exposure (incl. OJK, data protection)
• 4. Architecture Capability: Cloud, network, application, and IT/OT security across industries
• 5. Executive & Crisis Handling: Clear Board communication and effective incident leadership