InfoSec Policy Architect — Governance & Standards

Golden Agri-Resources (GAR); Jakarta Pusat; On-site; IDR 300,000,000 - 540,000,000; Full time

Benefits offered by this job

Professional development opportunities

Job summary

Golden Agri-Resources (GAR) is seeking an Information Security Policy Specialist to develop, standardize, and maintain comprehensive information security policies across cybersecurity domains. This role ensures governance, reduces fragmented documentation, and aligns with regulatory requirements and industry best practices.

You will help build a unified policy framework for governance and operational consistency.

Qualifications

• Bachelor’s degree in Information Security, Cybersecurity, Information Technology, or a related field.
• 3–7 years of experience in Information Security Governance, Risk & Compliance (GRC) or security policy development.
• Experience in developing and maintaining information security policies, standards, and procedures.
• Familiar with ISO 27001/27002, NIST CSF, and CIS Controls.
• Strong technical writing, documentation, analytical, and stakeholder management skills.
• Ability to translate technical security requirements into clear and practical policies.
• Professional certifications such as CISA or CISM are an advantage.

Responsibilities

• Develop, review, and maintain information security policies, standards, procedures, and guidelines.
• Standardize and consolidate security documentation to ensure consistency across the organization.
• Collaborate with Cybersecurity, IT, Risk & Compliance (GRC), and Legal teams to define and validate security controls.
• Ensure policies align with industry standards and frameworks such as ISO 27001/27002, NIST CSF, and CIS Controls.
• Support policy governance processes, including version control, review cycles, approvals, and audit readiness.
• Maintain a centralized policy repository and ensure documentation remains current with regulatory and business requirements.
• Promote awareness and adoption of information security policies through communication and training initiatives.
• Identify policy gaps and recommend continuous improvements to strengthen governance and compliance.

Skills

Technical writing

Documentation

Analytical thinking

Stakeholder management

Policy development

Policy governance

Education

Bachelor’s degree in Information Security / Cybersecurity / IT

Job description

Golden Agri-Resources (GAR) is seeking an Information Security Policy Specialist to develop, standardize, and maintain comprehensive information security policies across cybersecurity domains. This role ensures governance, reduces fragmented documentation, and aligns with regulatory requirements and industry best practices.

You will help build a unified policy framework for governance and operational consistency.