Information Security Officer

Indonesia Stock Exchange; Jakarta Pusat; On-site; IDR 167,400,000 - 256,680,000; Full time

Job summary

Indonesia Stock Exchange is seeking an Information Security Officer to help develop, implement, and continually improve the company's information security governance framework. The role requires collaboration with business and tech stakeholders to ensure policies, standards, and controls align with regulatory requirements.

The ideal candidate will have a security mindset, strong analytical skills, and experience in risk management, policy development, and compliance activities within a financial

Qualifications

• Minimum 2 years in information security, cybersecurity, IT risk, governance, or compliance.
• Experience in developing, reviewing, or implementing information security policies and controls is an advantage.
• Good understanding of information security regulations and standards.
• Ability to work with business and technology stakeholders to address gaps and remediation.

Responsibilities

• Support development, implementation, and continuous enhancement of the information security governance framework, including policies, standards, risk management, and compliance.
• Maintain internal controls, security assurance, and regulatory requirements across the organization.
• Coordinate with risk, compliance, and audit teams to address findings and track remediation.
• Engage with business and technology stakeholders to address security gaps and improve controls.

Skills

InfoSec Governance

Risk Management

Policy Development

Stakeholder Mgmt

Compliance Knowledge

Incident Management

Regulatory Standards

Audit Remediation

Analytical Skills

Education

Bachelor’s Degree in CS/IT/Cybersecurity/Info Systems

Job description

We are seeking a highly motivated and analytical professional to join our team as an Information Security Officer. In this role, you will be responsible for supporting the development, implementation, and continuous enhancement of the company’s information security governance framework, including information security policies, standards, risk management, compliance, internal controls, security assurance, and regulatory requirements.

Minimum Qualifications

Education

Bachelor’s Degree (S1) in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related field.

Experience

• Minimum 2 years of relevant professional experience in Information Security, Cybersecurity, IT Risk, IT Governance, IT Compliance, or related fields.
• Practical experience in information security assessment, security control implementation, compliance activities, or security assurance is preferred.
• Experience in developing, reviewing, or implementing information security policies, standards, procedures, or controls is an advantage.
• Experience working with business and technology stakeholders to address security gaps, coordinate remediation, and improve security controls is an advantage.

Skills

• Strong understanding of Information Security Management, Information Security Governance, Cybersecurity Risk Management, IT Governance, and applicable information security regulations and standards.
• Ability to assess information security risks and control effectiveness, identify security gaps, and develop appropriate recommendations or remediation actions.
• Ability to develop, implement, monitor, and continuously improve information security policies, standards, procedures, controls, and security programs in alignment with business requirements and identified risks.
• Ability to support security assurance and regulatory compliance activities, including evidence management, remediation tracking, and follow-up of audit or regulatory findings.
• Good technical understanding of IT Security, IT Infrastructure, Business Application Systems, Security Architecture, and Cybersecurity Incident Management, with an understanding of Stock Exchange Business Operations.
• Strong analytical, problem-solving, documentation, and stakeholder management skills, with the ability to work effectively across business, technology, risk, compliance, and audit functions.
• Relevant certification or training in Information Security, Cybersecurity, IT Risk, IT Governance, Compliance, or related fields is an advantage. A strong commitment to continuous learning and professional development in information security is highly valued.

General Requirements

• Minimum GPA min. 3.00 (out of 4.00)
• Computer literate (Microsoft Office, MS Excel, & Power Point)
• Excellent communication skills in both Indonesian and English (verbal and written)
• Knowledge of Capital Market will be an advantage.
• Strong alignment with our core values: Teamwork, Integrity, Professionalism, and Service Excellence