Information Security Policy Architect

Golden Agri Resources; Jakarta Pusat; On-site; IDR 180,000,000 - 360,000,000; Full time

Job summary

Golden Agri Resources is seeking an Information Security Policy Specialist to develop and standardize security policies across domains. You will maintain a centralized policy library, ensure alignment with ISO 27001/27002 and NIST CSF, and drive governance with cross-functional teams in Jakarta.

You will translate complex security requirements into practical policies, support audit readiness, and promote awareness through training initiatives.

Qualifications

• Bachelor's degree in Information Security, Cybersecurity, Information Technology, or related field.
• 3–7 years of experience in Information Security Governance, Risk & Compliance or policy development.
• Experience developing and maintaining security policies, standards, and procedures.
• Familiar with ISO 27001/27002, NIST CSF and CIS Controls.
• Strong writing, documentation, analytical, and stakeholder management skills.
• Certs such as CISA or CISM are a plus.

Responsibilities

• Develop, review, and maintain information security policies, standards, procedures, and guidelines.
• Standardize and consolidate security documentation for consistency.
• Collaborate with Cybersecurity, IT, Risk, Compliance, and Legal to define and validate controls.
• Align policies with ISO 27001/27002, NIST CSF, CIS Controls.
• Support governance processes: versioning, reviews, approvals, audits.
• Maintain a centralized policy repository and update with regulatory changes.
• Promote awareness and adoption through communications and training.
• Identify policy gaps and recommend governance improvements.

Skills

Technical writing

Documentation

Analytical

Stakeholder mgmt

Education

Bachelor's degree in Information Security/IT

Job description

Golden Agri Resources is seeking an Information Security Policy Specialist to develop and standardize security policies across domains. You will maintain a centralized policy library, ensure alignment with ISO 27001/27002 and NIST CSF, and drive governance with cross-functional teams in Jakarta.

You will translate complex security requirements into practical policies, support audit readiness, and promote awareness through training initiatives.