Security Strategy & IT Operations Leader

Hubexo; Jakarta Pusat; On-site; IDR 900,000,000 - 1,400,000,000; Full time

Job summary

Hubexo is seeking a Head of IT Security to own and execute the security, IT operations and compliance agenda for a global technology business. You will set the security strategy, lead programmes and work with senior stakeholders, while remaining hands-on to guide incidents and remediation across platforms, integrations and vendors.

You will drive ISO 27001 and SOC 2 initiatives, manage external audits, and partner with Procurement and Legal on security requirements.

Qualifications

• 8+ years in IT security/IT operations with 3+ years in leadership.
• ISO 27001 and SOC 2 audit experience.
• Hands-on with compliance automation platforms (Vanta, Drata, or Secureframe).
• Experience in SaaS/tech data-driven environments.
• Vendor security assessment experience.
• Penetration testing leadership.
• MS 365 Entra ID and cloud security proficiency.

Responsibilities

• Define information security strategy and risk management.
• Lead IT operations incl identity and access management.
• Own incident response plans and BCM/DR.
• Lead ISO 27001 certification and SOC 2 audits.
• Oversee vendor security assessments and remediation.
• Manage penetration testing and remediation with engineers.
• Manage external SOC provider and SLAs.

Skills

IT security leadership

ISO 27001

SOC 2

Penetration testing

Vendor security

Cloud security AWS/Azure

MS 365 & Entra ID

Stakeholder mgmt

Tools

Vanta

Drata

Secureframe

Job description

Hubexo is seeking a Head of IT Security to own and execute the security, IT operations and compliance agenda for a global technology business. You will set the security strategy, lead programmes and work with senior stakeholders, while remaining hands-on to guide incidents and remediation across platforms, integrations and vendors.

You will drive ISO 27001 and SOC 2 initiatives, manage external audits, and partner with Procurement and Legal on security requirements.