IT Cybersecurity Lead

Star Energy Geothermal; Jakarta Pusat; On-site; IDR 600,000,000 - 900,000,000; Full time

Job summary

Star Energy Geothermal, Indonesia's leading geothermal energy producer, seeks an IT Security Lead to strengthen cybersecurity across IT and OT environments. You will lead cybersecurity operations, governance, risk management, and incident response to protect assets, infrastructure, applications, data, and critical facilities.

Responsibilities include implementing controls, coordinating vulnerability management, monitoring security platforms, leading incident response, and overseeing IAM

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Information Systems, Cybersecurity, Engineering, or related discipline.
• 3–5 years of cybersecurity operations, vulnerability management, security monitoring, incident response, IAM, infrastructure security, or IT audit support.
• Solid understanding of cybersecurity threats, IT/OT security, vulnerability management, incident response, ITGC, ISO 27001, NIST, data protection, and technology risk management.
• Experience in multi-site, industrial, energy, or OT-integrated environments is a plus.
• Relevant professional certifications such as CompTIA Security+, CEH, CISSP, CISM, ISO 27001, Microsoft Security, cloud security, or network security certifications are preferred.
• Strong analytical, communication, coordination, and stakeholder management skills, capable of handling security priorities across tech and business teams.

Responsibilities

• Lead implementation, monitoring, and improvement of cybersecurity controls across infrastructure, endpoints, apps, cloud, networks, identity platforms, and OT environments.
• Coordinate vulnerability management including scanning, risk assessment, remediation prioritization, patch follow-up, and security reporting.
• Oversee security monitoring and threat response across SOC services, endpoint protection, email security, network security, and other security platforms.
• Lead cybersecurity incident response including investigation, containment, escalation, stakeholder communication, recovery, and post-incident improvement.
• Coordinate IAM activities covering privileged access, MFA, user access, provisioning, deactivation, and segregation of duties.
• Support cybersecurity governance, risk, and compliance activities including ITGC, ISO 27001 alignment, risk assessments, audits, control testing, remediation tracking.
• Lead cybersecurity awareness initiatives, phishing simulations, user communications, and capability-building activities.
• Collaborate with IT, OT, business, project, vendor, SOC, and security partners to embed cybersecurity requirements into projects and operations.

Skills

Cybersecurity operations

Vulnerability management

Incident response

Identity access

Governance & risk

Stakeholder management

Education

Bachelor’s degree in IT or related

Tools

CompTIA Security+

CEH

CISSP

CISM

ISO 27001

Microsoft Security

Cloud security

Job description

About the Role

Star Energy Geothermal, Indonesia's leading geothermal energy producer, is seeking an IT Security Lead to strengthen cybersecurity across our IT and OT environments. The role leads cybersecurity operations, governance, risk management, and incident response to protect our information assets, technology infrastructure, applications, data, and critical operational environments.

Job Description

• Lead the implementation, monitoring, and continuous improvement of cybersecurity controls across infrastructure, endpoints, applications, cloud services, networks, identity platforms, and OT-related environments.
• Coordinate vulnerability management, including scanning, risk assessment, remediation prioritization, patch follow-up, exception handling, and security reporting.
• Oversee security monitoring and threat response across SOC services, endpoint protection, email security, network security, and other security platforms.
• Lead cybersecurity incident response, including investigation, containment, escalation, stakeholder communication, recovery, and post-incident improvement.
• Coordinate identity and access management activities covering privileged access, MFA, user access, provisioning, deactivation, and segregation of duties.
• Support cybersecurity governance, risk, and compliance activities, including ITGC, ISO 27001 alignment, risk assessments, audits, control testing, and remediation tracking.
• Lead cybersecurity awareness initiatives, phishing simulations, user communications, and capability-building activities.
• Collaborate with IT, OT, business, project, vendor, SOC, and security partners to embed cybersecurity requirements into technology projects and operational activities.

Job Requirements

• Education: Bachelor’s degree in Information Technology, Computer Science, Information Systems, Cybersecurity, Engineering, or a related discipline.
• Experience: Minimum 3–5 years of relevant experience in cybersecurity operations, vulnerability management, security monitoring, incident response, identity and access management, infrastructure security, or IT audit support.
• Good understanding of cybersecurity threats, IT/OT security principles, vulnerability management, incident response, ITGC, ISO 27001, NIST, data protection, and technology risk management.
• Experience in multi-site, industrial, energy, or OT-integrated environments will be an advantage.
• Relevant professional certifications such as CompTIA Security+, CEH, CISSP, CISM, ISO 27001, Microsoft Security, cloud security, or network security certifications are preferred.
• Strong analytical, communication, coordination, and stakeholder management skills, with the ability to manage security priorities across technical and business teams.

Why Join Us

Join Star Energy Geothermal and play a key role in protecting the technology and critical environments that support reliable, clean energy production. You will work across IT and OT environments, strengthen cybersecurity and operational resilience, and help enable secure digital transformation, cloud adoption, data initiatives, and emerging technologies.