IT Senior Security Officer

PT Gudang Kripto Indonesia; Tangerang Selatan; On-site; IDR 335.008.000 - 502.513.000; Full time

Job summary

A crypto exchange firm in Indonesia is seeking an IT Security Design & Engineering Section Head to oversee the implementation of information security policies and lead incident response activities. Candidates should possess a minimum of 5 years of experience in information security, with strong knowledge of network and cloud security. The role requires collaboration with various teams to ensure a secure system architecture and compliance with international standards. Attractive benefits and a supportive work environment are offered.

Benefits

Security training programs

Health benefits

Career development opportunities

Qualifications

• Minimum 5 years of experience in information security with at least 2 years in a senior role.
• Strong knowledge of network and application security.
• Experience in designing security controls.

Responsibilities

• Develop and implement information security policies and standards.
• Manage end-to-end system security.
• Conduct vulnerability assessments and penetration testing.

Skills

Information security management

Network security

Incident response

Cloud security

Risk assessments

Education

Bachelor's Degree in Information Technology

Tools

SIEM

Data Loss Prevention (DLP)

Multi-Factor Authentication (MFA)

Job description

Responsibilities

• Develop, define, and implement comprehensive and up-to-date information security policies, procedures, and standards.


• Manage and monitor end-to-end system security covering networks, servers, applications, databases, APIs, and cloud services to minimize cyber risks.


• Conduct cyber threat monitoring, vulnerability assessments, penetration testing, and regular security testing.


• Lead security incident response activities, including investigation, remediation, incident documentation, and continuous improvement recommendations.


• Identify, analyze, and mitigate information security risks through a proactive and risk-based approach.


• Collaborate with IT, Engineering, DevOps teams, and third-party vendors to ensure secure system architecture (secure by design).


• Support compliance with international information security standards such as ISO/IEC 27001 and industry frameworks including NIST and OWASP, through implementation and periodic internal audits.


• Actively participate in preparation for and response to internal and external audits, including compliance with Indonesian regulations related to Digital Financial Asset Trading Providers.


• Develop and deliver security awareness training programs to strengthen a strong security culture across the organization.


• Prepare periodic security reports and present strategic findings and recommendations to senior management.

Qualifications & Requirements

• Minimum Bachelor’s Degree (S1) in Information Technology, Information Systems, Cyber Security, or other relevant fields.


• Minimum 5 years of experience in information security or system security, with at least 2 years in a senior or leadership role.


• Willing to work on-call or on standby as required to support operational and security needs.


• Strong and in-depth knowledge of network security, application security, cloud security (e.g., AWS, Huawei Cloud, GCP, Azure, etc.), and data protection.


• Proven expertise in incident response, vulnerability management, and security monitoring.


• Hands-on experience in designing and implementing security controls, including encryption, Multi-Factor Authentication (MFA), SIEM, and Data Loss Prevention (DLP).


• Familiar with security frameworks and standards such as ISO 27001, NIST, OWASP, PCI DSS (if applicable), and best practices within the crypto industry.


• Experience conducting risk assessments, secure code reviews, and penetration testing.


• Good understanding of the implementation and importance of audit trails in operational systems.


• How many years' experience do you have as an Information Technology Security Officer?


• A crypto exchange operating under the supervision of and in full compliance with the official regulations of the Financial Services Authority (OJK) and Self-Regulatory Organizations (SRO), and certified for compliance with ISO 27001:2022 standards in Indonesia.


• A crypto exchange operating under the supervision of and in full compliance with the official regulations of the Financial Services Authority (OJK) and Self-Regulatory Organizations (SRO), and certified for compliance with ISO 27001:2022 standards in Indonesia.

Positions

• IT Security Design & Engineering Section Head — South Jakarta, Jakarta, ID


• IT Security Engineer — Jakarta, ID