Security & Compliance Leader, IT Operations

Hubexo; Jakarta Selatan; On-site; IDR 600,000,000 - 1,000,000,000; Full time

Job summary

Hubexo is seeking a hands-on Head of IT Security to own the security posture end-to-end amid a major technology migration. You will lead IT operations, IAM, incident response and vendor security, while embedding compliance across platforms and vendors.

You will collaborate with legal, procurement and engineering to ensure regulatory readiness, audits and security controls across Microsoft 365, cloud environments, and SaaS integrations.

Qualifications

• 8+ years in IT security and/or IT operations, incl. 3+ years leading security/IT function
• Proven experience delivering ISO 27001 certification and/or SOC 2 attestation, incl. external audits
• Hands-on with compliance automation platforms (Vanta preferred) and related tools
• Experience leading security incidents from identification to remediation and lessons learned
• Experience establishing vendor/third-party security assessment processes
• Experience scoping and managing penetration tests and driving remediation with engineering teams
• Experience managing outsourced SOC/MDR providers and SLAs
• Strong knowledge of Microsoft 365, Entra ID security, endpoints and cloud environments (AWS/Azure)
• Strong communication and stakeholder management, able to explain risks to non-technical audiences
• Experience in SaaS/tech/data-driven business, esp. during migrations/merger scenarios
• Familiarity with securing SaaS platforms like HubSpot, NetSuite, Chargebee, Make.com
• Understanding UK GDPR and cross-jurisdiction data protection
• Certifications like CISSP, CISM, ISO 27001 Lead Implementer/Auditor advantageous
• Cyber Essentials Plus or similar customer-driven security frameworks a plus

Responsibilities

• Define Hubexo's information security strategy, roadmap and risk management approach
• Report security posture, risks and compliance to senior leadership
• Build security awareness and manage budget, tooling and suppliers
• Oversee IT Operations: end-user computing, IAM, devices and core infrastructure
• Ensure secure-by-default configurations across M365, endpoints, networks and SaaS
• Manage IT service levels, patching, backup, recovery and onboarding of new systems
• Own incident response plans, playbooks and escalation processes
• Lead security incidents from triage to resolution and lessons learned
• Maintain business continuity and disaster recovery plans
• Lead ISO 27001 certification and SOC 2 attestation, including audits and remediation
• Own Vanta for compliance monitoring and control management
• Maintain ISMS and support customer security questionnaires and audits
• Lead vendor security assessments and engage Procurement/Legal on security requirements
• Track remediation and risk acceptance for third-party security issues
• Own penetration testing and vulnerability management programmes
• Manage external testing providers and drive remediation with tech teams
• Establish remediation priorities based on risk
• Manage external SOC provider, service levels and monitoring
• Review SOC reporting and improve detection
• Be the internal escalation point for SOC alerts and incidents

Skills

IT security

Security leadership

ISO 27001 & SOC 2

Vanta / compliance tools

Penetration testing

Vendor security assessments

SOC/MDR management

Microsoft 365 / Entra ID / AWS/Azure

Stakeholder communication

SaaS / data-driven business

Education

CISSP

CISM

ISO 27001 Lead Implementer

ISO 27001 Lead Auditor

Tools

Vanta

Drata

Secureframe

Job description

Hubexo is seeking a hands-on Head of IT Security to own the security posture end-to-end amid a major technology migration. You will lead IT operations, IAM, incident response and vendor security, while embedding compliance across platforms and vendors.

You will collaborate with legal, procurement and engineering to ensure regulatory readiness, audits and security controls across Microsoft 365, cloud environments, and SaaS integrations.