Information Security & Compliance Architect

AIA Indonesia; Jakarta Pusat; On-site; IDR 90,000,000 - 130,000,000; Full time

Job summary

AIA Indonesia is seeking a senior information security professional to lead governance, risk, and compliance across local and group standards. You will implement ISO/IEC 27001:2022 controls, align with NIST CSF 2.0, and ensure adherence to OJK regulations and PDP Law for insurance services.

Based in Jakarta, you will coordinate with Group CISO Office, manage third-party risk, and drive security-by-design in digital products while reporting to BU leadership and regulators.

Qualifications

• Bachelor's degree required in information security or related field.
• 5-8+ years in information security, ideally in financial services/insurance.
• Experience implementing ISO/IEC 27001:2022 Annex A controls and NIST CSF 2.0 compatible programs.
• Hands-on knowledge of cloud security, IAM, SIEM/EDR, and secure SDLC.

Responsibilities

• Lead localization and enforcement of ISMS policies across the business unit.
• Coordinate with Group CISO Office for policy interpretation and risk acceptance processes.
• Ensure compliance with OJK Regulation No. 4/POJK.05/2021 and PDP Law; align with ISO 27001:2022 and NIST CSF 2.0.
• Drive security governance, incident response, and business continuity planning.

Skills

Information security

Security governance

Risk management

Incident response

Cloud security

Education

Bachelor's degree in Information Security

Tools

ISO/IEC 27001:2022

NIST CSF 2.0

SIEM

EDR

Job description

AIA Indonesia is seeking a senior information security professional to lead governance, risk, and compliance across local and group standards. You will implement ISO/IEC 27001:2022 controls, align with NIST CSF 2.0, and ensure adherence to OJK regulations and PDP Law for insurance services.

Based in Jakarta, you will coordinate with Group CISO Office, manage third-party risk, and drive security-by-design in digital products while reporting to BU leadership and regulators.