IT Security Specialist

Spiralyze; Remote; IDR 200.000.000 - 300.000.000; Full time

Job summary

A fast-growing CRO is seeking a Security Lead to enhance security processes while working remotely. You will manage endpoint security, conduct vulnerability assessments, and enforce compliance with frameworks like ISO 27001 and GDPR. Ideal candidates bring over 2 years of experience, strong communication skills, and the ability to analyze complex issues. This full-time role offers competitive salary and benefits such as technology reimbursement and 20 days of vacation.

Benefits

Cutting-edge work environment

Technology reimbursement

Company-sponsored training

20 days of paid vacation

Qualifications

• 2+ years experience in Endpoint Security Management, particularly in remote environments.
• Strong communication skills necessary for client and team interactions.
• Ability to analyze and reason through complex security challenges.

Responsibilities

• Implement and maintain endpoint and network security tools.
• Manage user access controls and enforce security policies.
• Conduct vulnerability assessments and coordinate incident responses.
• Support compliance for ISO 27001, GDPR, SOC 2, etc.
• Monitor system logs for suspicious activity.

Skills

Endpoint Security Management

Strong written and verbal communication

Analytical and reasoning ability

High persistence and follow-through

Ability to clarify vague requests

Tools

CrowdStrike

MFA

SSO

VPNs

password managers

Job description

Department: Security

Location: Remote Indonesia (Yogyakarta)

Description

We’re looking for someone great to lead critical work in Security & Compliance!

Your primary task is to strengthen our security processes and keep our agency and our clients safe. You will take extreme amounts of initiative and enthusiasm to get things done. To do this, you should have a natural curiosity to research, experiment and reach out to the right people.

We’re looking for someone who is driven to build comprehensive security systems, but also practical enough to understand real-world constraints and create resilient safeguards when the ideal setup isn’t immediately available. Strong problem-solving is a must. You should be able to break down complex security issues into manageable components and execute them flawlessly.

You will be responsible for communicating with internal teams, clients, and vendors to win buy‑in, explain risks, enforce compliance, and keep everyone aligned.

Key Responsibilities

• Implementing, monitoring, and maintaining endpoint and network security tools (CrowdStrike, MFA, SSO, VPNs, password managers, etc.)
• Managing user access controls and enforcing security policies across all devices (including BYOD).
• Conducting vulnerability assessments and coordinating incident response.
• Reviewing and hardening security configurations for web servers, cloud environments, and third‑party integrations.
• Supporting compliance efforts for ISO 27001, GDPR, SOC 2, and similar frameworks.
• Creating and maintaining security documentation (policies, procedures, incident response plans).
• Monitoring system logs and alerts for suspicious activity and responding to events.
• Running employee security awareness training and phishing simulations.
• Collaborating with Development and DevOps to ensure secure coding and deployment practices.
• Coordinating with clients and vendors on security questionnaires, audits, and compliance requirements.

Skills, Knowledge and Expertise

• Experience: 2+ years in Endpoint Security Management, particularly for web agencies with a remote, BYOD policy.
• Communication: Strong written and verbal communication skills (you may be asked to complete a live email task during the interview)
• Grit: High persistence and follow‑through to ensure people comply with security processes
• Clarity: Ability to clarify vague requests, ask smart questions, and structure security recommendations clearly
• Analysis: Strong analytical and reasoning ability

Benefits

• Cutting‑edge work in a fast‑growing CRO environment where security is mission‑critical
• Permanently remote work environment
• Full‑time position with semi‑flexible hours — must overlap 4 hours with EST (8 AM–12 NN ET)
• Technology reimbursement (hardware and software support)
• Company‑sponsored training and security certifications
• 20 days of paid vacation plus holidays
• Competitive salary