Head of IT Security & Compliance

tiket.com; Daerah Khusus Ibukota Jakarta; On-site; USD 35.000 - 60.000; Full time

Job summary

A leading company in the travel sector is seeking a Cybersecurity Leader to drive its security and compliance strategies. This role involves overseeing daily security operations, managing risk assessments, and ensuring adherence to global standards. The ideal candidate will have over 12 years of IT security experience and a proven leadership track record, positioning the company to protect its 50+ million users effectively.

Qualifications

• 12+ years in IT security, 5+ in leadership.
• Experience in cloud security (AWS, GCP, Azure).
• Strong familiarity with GDPR, ISO 27001, SOC 2.

Responsibilities

• Lead cybersecurity, compliance, and IT risk strategy.
• Monitor security operations including threat detection.
• Conduct internal and external security audits.

Skills

IT security

cybersecurity

compliance

risk management

cloud security

Education

CISSP

CISM

CISA

CRISC

Job description

We think you also hate when travel app is giving you a headache, right? A slight misinformation can ruin the trip.

That is exactly what we are tackling as t-fam! Making sure that our 50+ million users have the best experience in crafting their own adventure.

#LI-EP1

Your main duties in flying with us

• Lead and execute the company’s cybersecurity, compliance, and IT risk strategy in alignment with business goals.
• Oversee daily security operations, including threat detection, incident response, and vulnerability management across all environments.
• Ensure compliance with ISO 27001, SOC 2, PCI-DSS, GDPR, PDPA, and other global standards.
• Manage enterprise risk assessments, mitigation planning, and control validations.
• Develop, enforce, and maintain security policies, standards, and procedures.
• Monitor and respond to emerging threats, vulnerabilities, and compliance requirements.
• Conduct and manage internal and external security audits and interface with third-party auditors.
• Review and enhance business continuity, disaster recovery, and incident response plans.
• Monitor security reports and resolve identified issues promptly.
• Leverage security tools to detect, log, and prevent unauthorized access and data loss.
• Support security integration in new technology deployments and project deliveries.
• Drive a security-by-design approach in collaboration with product, engineering, legal, and GRC teams.
• Promote security awareness and lead organization-wide training initiatives.
• Build, lead, and mentor a high-performing security and technology compliance team.
• Collaborate with stakeholders across departments and executive leadership.
• Track and report security risks and continuous improvement opportunities.
• Research and recommend new security technologies and practices.
• Operate and improve the Information Security Management System (ISMS).
• Deliver cyber assurance, governance, and IT quality compliance programs.
• Lead security strategy and execution for cloud services and platforms.
• Stay current with global security trends and evolving threat landscapes.

Mandatory belongings that you must prepare

• 12+ years of experience in IT security, including at least 5 years in a leadership role within a digital-native or high-growth tech company.
• Proven track record in managing security and compliance programs across multiple regions and jurisdictions.
• Deep knowledge of cloud security (AWS, GCP, Azure), DevSecOps, identity & access management, and zero-trust architecture.
• Strong familiarity with global regulatory frameworks and standards (e.g., GDPR, ISO 27001, SOC 2, NIST).Experience navigating audits, certifications, and interfacing with regulatory bodies.
• Excellent stakeholder management and communication skills, especially with executive leadership and board-level audiences.
• Industry certifications (e.g., CISSP, CISM, CISA, CRISC) are a strong plus.

In the event that you haven’t received any updates after 3 weeks, your data will be kept and we may contact you for another career destination. Meanwhile, discover more abouttiket.comonInstagram,LinkedIn, orYouTube.