Information Security Manager

Indodax; Jakarta Selatan; On-site; IDR 350,000,000 - 650,000,000; Full time

Job summary

Indodax is seeking an experienced Information Security professional with a strong GRC/auditing background. The role requires 5–8 years in information security and deep expertise in ISO 27001, SOC 2 Type II, or NIST 800-53.

You will drive governance, risk management, and compliance across the organization. The ideal candidate will lead cross-departmental projects such as obtaining company-wide SOC 2 certification, ensuring robust security posture and regulatory alignment.

Qualifications

• Minimum S1 in Informatics/Computer Systems or equivalent.
• 5–8 years in Information Security with emphasis on GRC or Auditing.
• Deep knowledge of ISO 27001, SOC 2 Type II, or NIST 800-53.

Responsibilities

• Lead cross-departmental initiatives (e.g., achieving company SOC 2 certification).

Skills

Information Security

GRC

Auditing

ISO 27001

SOC 2 Type II

NIST 800-53

Project Management

Education

Bachelor's degree in IT/Computer Science

Job description

1. Experience:

Min. S1 Teknik Informatika/System Komputer/or similar

• Background: 5-8 years in Information Security, with a strong focus on GRC (Governance, Risk, Compliance) or Auditing.
• Frameworks: Deep expert-level knowledge of ISO 27001, SOC 2 Type II, or NIST 800-53.
• Project Management: Proven ability to manage cross-departmental projects (e.g., "Getting the whole company SOC 2 certified").

2. Certifications (Essential):

• CISM (Certified Information Security Manager) - The gold standard for this specific role.
• CISA (Certified Information Systems Auditor)
• CISSP (Certified Information Systems Security Professional)