IT Senior Security Officer

PT Gudang Kripto Indonesia; Tangerang; On-site; IDR 200.000.000 - 300.000.000; Full time

Job summary

A digital asset security firm is looking for a qualified information security professional in Tangerang, Indonesia. The role involves developing and implementing comprehensive security policies, managing system security across various platforms, and ensuring compliance with international standards. Candidates must have at least 5 years of experience in information security and strong knowledge in network, application, and cloud security. A proactive approach to security risks and incident response is essential for success in this position.

Qualifications

• 5+ years of experience in information security, with 2+ years in a leadership role.
• Willingness to work on-call to support operational and security needs.
• Familiarity with ISO 27001, NIST, OWASP standards.

Responsibilities

• Develop and implement information security policies and standards.
• Manage end-to-end system security across various platforms.
• Conduct cyber threat monitoring and vulnerability assessments.
• Lead incident response efforts and document investigations.
• Collaborate with teams to ensure secure system architectures.

Skills

Network security

Application security

Cloud security

Incident response

Vulnerability management

Security monitoring

Education

Bachelor’s Degree in Information Technology or related field

Tools

SIEM

Data Loss Prevention (DLP)

Multi-Factor Authentication (MFA)

Job description

Responsibilities

Develop, define, and implement comprehensive and up-to-date information security policies, procedures, and standards.

Manage and monitor end‑to‑end system security covering networks, servers, applications, databases, APIs, and cloud services to minimize cyber risks.

Conduct cyber threat monitoring, vulnerability assessments, penetration testing, and regular security testing.

Lead security incident response activities, including investigation, remediation, incident documentation, and continuous improvement recommendations.

Identify, analyze, and mitigate information security risks through a proactive and risk‑based approach.

Collaborate with IT, Engineering, DevOps teams, and third‑party vendors to ensure secure system architecture (secure by design).

Support compliance with international information security standards such as ISO/IEC 27001 and industry frameworks including NIST and OWASP, through implementation and periodic internal audits.

Actively participate in preparation for and response to internal and external audits, including compliance with Indonesian regulations related to Digital Financial Asset Trading Providers.

Develop and deliver security awareness training programs to strengthen a strong security culture across the organization.

Prepare periodic security reports and present strategic findings and recommendations to senior management.

Qualifications & Requirements

• Minimum Bachelor’s Degree (S1) in Information Technology, Information Systems, Cyber Security, or other relevant fields.
• Minimum 5 years of experience in information security or system security, with at least 2 years in a senior or leadership role.
• Willing to work on‑call or on standby as required to support operational and security needs.
• Strong and in‑depth knowledge of network security, application security, cloud security (e.g., AWS, Huawei Cloud, GCP, Azure, etc.), and data protection.
• Proven expertise in incident response, vulnerability management, and security monitoring.
• Hands‑on experience in designing and implementing security controls, including encryption, Multi‑Factor Authentication (MFA), SIEM, and Data Loss Prevention (DLP).
• Familiar with security frameworks and standards such as ISO 27001, NIST, OWASP, PCI DSS (if applicable), and best practices within the crypto industry.
• Experience conducting risk assessments, secure code reviews, and penetration testing.
• Good understanding of the implementation and importance of audit trails in operational systems.

Company

IP‑TRIBE PRIVATE LIMITED, Jakarta, ID.