Infosec & Compliance Manager

PT Mid Solusi Nusantara (MEKARI); Indonesia; On-site; IDR 100.000.000 - 200.000.000; Full time

Job summary

Une société SaaS innovante recherche un(e) Infosec and Compliance Manager passionné(e) pour diriger la sécurité informatique et les programmes de conformité. Le rôle exige une forte expertise en gestion des risques, politique IT et conformité réglementaire, afin d'assurer un environnement IT sécurisé et en adéquation avec les lois et normes industrielles.

Benefits

Assurance santé privée premium

Accès anticipé au salaire

Horaires de travail flexibles

Programme de propriété d'ordinateur portable

Environnement de travail dynamique et amical

Qualifications

• Au moins 4 ans d'expérience IT avec un focus sur la conformité et la gestion des risques.
• Expérience en conformité ISO 27001 et réglementations indonésiennes.
• Familiarité avec les stratégies de cybersécurité offensives et défensives.

Responsibilities

• Évaluer et affiner la sécurité informatique et les pratiques de gouvernance.
• Diriger les activités de conformité mondiale en matière de sécurité de l'information.
• Développer et appliquer des politiques de sécurité informatique.

Skills

Gestion des risques

Compliance

Sécurité informatique

Communication

Gestion des parties prenantes

Education

Bac+4 en Informatique ou domaine connexe

Job description

Mekari is Indonesia's no. 1 Software-as-a-Service (SaaS) company. With our ecosystem of software solutions—including Mekari Jurnal, Mekari Talenta, Mekari Qontak, and Mekari Flex, we aim to facilitate entrepreneurs and leaders as they accelerate the digital transformation of their businesses.

In our 10+ years of journey we have reached over 1 Million platform users, and we're not planning to stop any time soon. We need more people like you: builders and owners with calculated ambition who are eager to grow and create their #BiggestImpact.

Job Summary :

As the Infosec and Compliance Manager, you will play a key role in shaping and maintaining a secure IT environment for our client. You will lead the development and execution of IT governance, risk management, and compliance programs, ensuring that our cybersecurity practices are robust and in line with our business objectives. As the subject matter expert, you will spearhead efforts to safeguard the organization, aligning IT initiatives with our broader strategic goals.

Key Responsibilities:

Assess and refine the organization’s IT security, risk management, and governance practices.

Direct and deliver global Information Security Compliance activities, to products including SaaS and regulated financial services,

Adopt, integrate, and customize multiple compliance framework to justify compliance plan and measure security and compliance performance

Develop and enforce IT policies and procedures to safeguard company assets.

Identify and assess potential risks, create mitigation strategies, and monitor their effectiveness.

Lead efforts to strengthen the company’s cybersecurity posture.

Conduct security and compliance due diligence on 3rd party's organization

Responsible to organization's security and compliance awareness.

Oversee the management of cybersecurity incidents and investigations.

Ensure adherence to relevant laws, regulations, and industry standards.

Collaborate with IT and business teams to embed GRC best practices into operational processes.

Facilitate certification bodies, regulators, customers, and partners audit to maintain certifications, attestations, or licenses such as UU PDP, ISO 27001, PJP, DJP, etc.

Report regularly to CISO on the status of all Compliance-related activities including compliance processes metrics, issues, and remediation actions.

Qualifications:

Proven leadership abilities with a deep understanding of IT governance, risk management, and compliance principles.

Minimum of 4+ years of IT experience, with a focus on governance, risk, and compliance.

At least 3 years experience in GRC activities, including experience related to compliance of ISO 27001 certifications. OJK, BI, or DJP's requirements.

Understanding of data privacy regulations relevant to Indonesian privacy laws.

Demonstrated ability to develop and implement IT policies.

In-depth knowledge of industry-specific regulations (e.g., PBI, POJK).

Experience in facilitating IT security audits and working with regulators or auditors.

Strong familiarity with ISO 27001 standards.

Familiar with both offensive and defensive cybersecurity strategies.

Good understanding of business processes of SaaS and financial services

Good understanding of security and compliance principles

Good stakeholders management and communication skill

Preferred:

Knowledge of ISO 27701 standards.

Hands-on experience in cloud security.

What You Will Get:

1. Competitive salary + daily allowance.
2. Premium private health insurance (outpatient, inpatient, maternity, dental).
3. Early access to salary + flex installment (employee loan) via Mekari Flex.
4. Allowance for sports activities and glasses/contact lenses.
5. Flexible working hours and remote work culture with free co-working space services.
6. Annual and unpaid leaves from day 1 of join date + unlimited sick leave with doctor note.
7. Notebook Ownership Program.
8. Strategic office location, accessible by MRT.
9. Friendly and dynamic work environment.
10. Opportunity to take part in growing Indonesia's no. 1 SaaS company

Our team will review your application and will be in touch if your application is shortlisted to the next stage. If you do not hear from us in 30 days, we will keep your resume on file in case a relevant opportunity opens up.

Computer Software & Networking 1,001-5,000 employees

Mekari is Indonesia's no. 1 Software-as-a-Service (SaaS) company. Our mission is to empower businesses and professionals to progress effortlessly. Our products (Talenta, Sleekr, Jurnal, KlikPajak) have been used by tens of thousands of business in Indonesia.

To reach millions, we need more people like you: entrepreneurs, builders, owners inside the company who are eager to grow at scale. Join us to empower more businesses with technology.

Mekari is Indonesia's no. 1 Software-as-a-Service (SaaS) company. Our mission is to empower businesses and professionals to progress effortlessly. Our products (Talenta, Sleekr, Jurnal, KlikPajak) have been used by tens of thousands of business in Indonesia.

To reach millions, we need more people like you: entrepreneurs, builders, owners inside the company who are eager to grow at scale. Join us to empower more businesses with technology.

Alamat email kamu