Security Operations Senior Manager - CISO

GoTo Group; Jakarta Pusat; On-site; IDR 700,000,000 - 900,000,000; Full time

Job summary

GoTo Group is seeking a Security Operations Senior Manager to own and lead the incident response program across our digital ecosystem. You will manage a high-performing team of responders, drive root-cause analysis, and develop scalable security solutions within our cloud and on-prem environments.

The role requires strategic leadership, governance experience with C-suite stakeholders, and a track record of improving incident response maturity.

Qualifications

• Leads incident response with end-to-end management and post-mortem learning.
• Able to translate security findings to business impact and drive cultural and process changes.

Responsibilities

• Be the leader for the incident response team and guide the group to best performance.
• Effectively manage cyber incidents end-to-end per defined processes and playbooks.
• Coordinate with business and technical stakeholders during incidents and provide timely updates.
• Set team goals and priorities and manage yearly deliverables.
• Contribute to budget planning and support Security Engineering teams.
• Coach and develop team members and foster collaboration across the organization.

Skills

Incident response leadership

Cybersecurity incident management

Threat detection

Digital forensic investigations

Tools

SIEM

SOAR

AWS

GCP

Job description

About the Role

As part of our Information Security function, we need a leader who can fully own, manage, respond to, and investigate cybersecurity incidents. As the Security Operations Senior Manager, this person will lead a team of highly technical responders and will need to have a vision to ensure continuous improvement and maintain a high-performing team. The scope includes incident management, threat detection, and digital forensic investigation in combination with root-cause analysis of security flaws and vulnerabilities. The role is also expected to develop elegant solutions to complex problems and apply appropriate technologies while following security engineering best practices.

What You Will Do

Be the leader for the incident response team - manage, empower, nurture, support, and guide the team, and bring out the best in them

Effectively manage and lead cyber incidents (end-to-end) according to the incident response process and playbooks. Also, support operational security remediation activities based on lessons learned from post-mortem investigations of incidents.

Manage the various stakeholders (business and technical) during an incident with timely reporting and updates; manage the cybersecurity incident response and investigation on network, endpoint, and cloud infrastructure

Manage the work deliverables of their team and can set goals and priorities throughout the year

Provides strategic inputs into budget management and planning and other business activities, and also supports the Security Engineering team

Provides coaching, feedback, developmental opportunities, etc. to direct/indirect reports within a broader team

Build relationships with stakeholders and leadership across the organization to influence change and drive consistency with Information Security standards. Also enable collaboration, provide oversight, and guidance for periodic security assessments and improvements

Research and analyze local and global cyber threats that could impact the company.

What You Will Need

Successfully lead major incidents and investigations that involve various stakeholders

Seasoned leader who can manage a team of responders and investigators

Experience in managing senior stakeholders (including C-suites and Board of Directors) and a seasoned leader who can manage a team of responders and investigators

Experienced in conducting investigations within cloud and SaaS platforms (eg AWS, GCP, Tencent Cloud, Alibaba Cloud, O365, G Suite, containers, etc), SIEMs, SOAR and other automation, etc.

Experienced in working with the Security Engineering team: DevSecOps, Offensive Security, Cloud Security, Security Architecture

Ability to derive and translate technical jargon to business impact, and experience in driving change (organizational, cultural, and process) needed to respond to current and emerging threats

• Experience in relevant industries (e.g., eCommerce, Logistics, FinTech, Banking) is a plus

Certified in one or more of the following security certifications is a plus: CISSP, CISA, CISM, SANS GIAC, or other relevant security certifications

About the Team

At GoTo, trust isn’t just something we talk about—it’s built into every line of code, every transaction, and every interaction across our ecosystem.

Our CISO function is the backbone of that trust. We are a team of world-class security engineers, risk strategists, and ethical hackers dedicated to creating a safe, resilient, and dependable digital ecosystem for millions of users, driver-partners, and merchants across Indonesia and beyond.

We don’t view security as a wall that slows innovation down. Instead, we act as the high-performance brakes on a race car—allowing GoTo’s product, engineering, and business teams to move faster, dream bigger, and build bolder, knowing our platforms are protected by cutting-edge defenses.Whether we are engineering automated threat responses, performing deep red-teaming simulations, or embedding security into modern CI/CD pipelines, our mission remains clear: to make GoTo the safest, most trusted digital platform in Southeast Asia.

About GoTo Group

GoTo is the largest digital ecosystem in Indonesia. GoTo’s mission is ‘empower progress’ by offering technology infrastructure and solutions that help everyone to access and thrive in the digital economy.

The GoTo ecosystem provides a wide range of services, including mobility, delivery, payments, financial services, and technology solutions for merchants. The ecosystem also provides e-commerce services through Tokopedia and banking services through its partnership with Bank Jago.

About Gojek

Gojek is Southeast Asia’s leading on-demand platform and pioneer of the multi-service ecosystem with over 2.5 million driver partners across the regions offering a wide range of services such as transportation, food delivery, logistics and more. With its mission to create impact at scale, Gojek is committed to resolving consumer problems and raising standards of living by connecting consumers to the best providers of goods and services in the market.

About GoTo Financial

GoTo Financial accelerates financial inclusion through its leading financial services and merchants solutions. Its consumer services include GoPay and GoPayLater and serve businesses of all sizes through Midtrans, Moka, GoBiz Plus, GoBiz, and Selly. With its trusted and inclusive ecosystem of products, GoTo Financial is open to new growth opportunities and aims to empower everyone to Make It Happen, Make It Together, Make It Last.