Information Security Manager – GRC & Audit Lead

INDODAX - Indonesia Digital Asset Exchange; Jakarta Pusat; On-site; IDR 350,000,000 - 700,000,000; Full time

Job summary

INDODAX - Indonesia Digital Asset Exchange is seeking a seasoned Information Security professional with a strong GRC and auditing background. The role focuses on building and maintaining governance, risk, and compliance programs and driving critical audits such as SOC 2 certification.

The ideal candidate has 5–8 years in information security, deep knowledge of ISO 27001, SOC 2 Type II, or NIST 800-53, and holds CISM, CISA, or CISSP certifications to lead security initiatives across the

Qualifications

• 5-8 years in Information Security with a focus on GRC or Auditing.
• Deep expert-level knowledge of ISO 27001, SOC 2 Type II, or NIST 800-53.
• Experience managing cross-departmental projects (e.g., leading SOC 2 certification).
• Certifications: CISM, CISA, CISSP are essential.

Skills

GRC

Auditing

Information Security

ISO 27001

SOC 2 Type II

NIST 800-53

Project Management

Education

Bachelor’s degree in Information Technology/Computer Science or related field

Job description

INDODAX - Indonesia Digital Asset Exchange is seeking a seasoned Information Security professional with a strong GRC and auditing background. The role focuses on building and maintaining governance, risk, and compliance programs and driving critical audits such as SOC 2 certification.

The ideal candidate has 5–8 years in information security, deep knowledge of ISO 27001, SOC 2 Type II, or NIST 800-53, and holds CISM, CISA, or CISSP certifications to lead security initiatives across the