Head of Information Security

Techconnect.id; Pulau Untung Jawa; On-site; IDR 900,000,000 - 1,500,000,000; Full time

Job summary

Techconnect.id is seeking a Head of Information Security to define and lead the enterprise cybersecurity strategy, protecting information assets, platforms, and operations while aligning with objectives and regulations.

You will establish governance, risk management, incident response, and data protection across IT/OT, collaborating with executive leadership and the Board to embed a culture of proactive defense.

Qualifications

• Lead enterprise cybersecurity for multi-entity environments.
• Define governance frameworks, policies, and controls across IT and operations.
• Strengthen threat intelligence and proactive defense capabilities.
• Advise executive leadership and Board on cyber risk transparency.
• Ensure security enables business growth and resilience.

Responsibilities

• Define and lead the enterprise cybersecurity strategy aligned with objectives and regulations.
• Establish governance frameworks, policies, and controls across IT and operations.
• Embed a risk-aware security culture and strengthen incident response and continuity planning.
• Serve as trusted advisor to executive leadership and the Board on cyber risks.

Skills

Cybersecurity leadership

Threat & vulnerability management

Incident response

Data protection

Compliance & governance

Tools

ISO 27001

NIST framework

Cloud security

IT/OT security

Job description

1. The Head of Information Security is responsible for defining and leading the enterprise cybersecurity strategy to protect the organization’s information assets, digital platforms, and operational infrastructure. The role ensures security posture aligns with corporate objectives, regulatory requirements, and evolving threat landscapes.

2. This role establishes and enforces cybersecurity governance frameworks, policies, and controls across IT and operational environments. This includes oversight of risk management, security architecture, incident response, data protection, identity and access management, third party security, and business continuity planning.

3. Strategically, this role strengthens organizational resilience by embedding a risk-aware security culture, enhancing threat intelligence capabilities, and ensuring proactive defense mechanisms. The role serves as a trusted advisor to executive leadership and the Board, providing transparency on cyber risks and ensuring security functions as a business enabler rather than a constraint to innovation and growth.

4. Security Leadership: 10–15 years leading enterprise cybersecurity in complex, multi-entity environments

5. Technical & Risk Expertise: ISO 27001 / NIST, threat & vulnerability management, incident response

6. Regulatory Knowledge: Strong compliance exposure (incl. OJK, data protection)

7. Architecture Capability: Cloud, network, application, and IT/OT security across industries

8. Executive & Crisis Handling: Clear Board communication and effective incident leadership