Information Security Manager

INDODAX - Indonesia Digital Asset Exchange; Jakarta Pusat; On-site; IDR 350,000,000 - 700,000,000; Full time

Job summary

INDODAX - Indonesia Digital Asset Exchange is seeking a seasoned Information Security professional with a strong GRC and auditing background. The role focuses on building and maintaining governance, risk, and compliance programs and driving critical audits such as SOC 2 certification.

The ideal candidate has 5–8 years in information security, deep knowledge of ISO 27001, SOC 2 Type II, or NIST 800-53, and holds CISM, CISA, or CISSP certifications to lead security initiatives across the

Qualifications

• 5-8 years in Information Security with a focus on GRC or Auditing.
• Deep expert-level knowledge of ISO 27001, SOC 2 Type II, or NIST 800-53.
• Experience managing cross-departmental projects (e.g., leading SOC 2 certification).
• Certifications: CISM, CISA, CISSP are essential.

Skills

GRC

Auditing

Information Security

ISO 27001

SOC 2 Type II

NIST 800-53

Project Management

Education

Bachelor’s degree in Information Technology/Computer Science or related field

Job description

Requirements

• Experience:
• Min. S1 Teknik Informatika/System Komputer/or similar
• Background: 5-8 years in Information Security, with a strong focus on GRC (Governance, Risk, Compliance) or Auditing.
• Frameworks: Deep expert-level knowledge of ISO 27001, SOC 2 Type II, or NIST 800-53.
• Project Management: Proven ability to manage cross-departmental projects (e.g., "Getting the whole company SOC 2 certified").
• Certifications (Essential):
• CISM (Certified Information Security Manager) - The gold standard for this specific role.
• CISA (Certified Information Systems Auditor)
• CISSP (Certified Information Systems Security Professional)