Senior Information Security Program Leader

Shopee; Indonesia; On-site; IDR 600,000,000 - 1,200,000,000; Full time

Job summary

Shopee in Indonesia seeks a seasoned Information Security Program Manager to lead the PM team across security sub-teams. You will own portfolio tracking, OKRs, and senior-leadership reporting with data-driven insights.

You will drive end-to-end cross-team programs, define ownership, coordinate audits (SOC 2, PCI DSS, ISO 27001), and push for timely, risk-aware delivery while improving PM processes with automation.

Qualifications

• At least 5 years of full-time project or program management, incl. 2 years leading a team.
• Proven delivery of complex, multi-team programs in information security, infra, cloud or IT risk.
• Hands-on experience with at least one external audit or certification (SOC 2, PCI DSS, ISO 27001).
• Strong stakeholder management across cultures and time zones with persistent commitments.
• Able to run many programs in parallel and make clear priority trade-offs.

Responsibilities

• Own portfolio tracking, quarterly OKRs and monthly program status reports to senior leadership.
• Drive cross-team programs end to end: milestones, dependencies and committed dates.
• Define clear ownership and accountability for cross-team programs with named owners.
• Coordinate audits such as SOC 2, PCI DSS, ISO 27001 and MAS TRM with evidence and timelines.
• Track findings to closure across security and engineering teams.
• Improve PM processes, trackers and dashboards with automation and AI.

Skills

Project management

Stakeholder management

Audit/compliance coordination

Cross-team leadership

Data-driven decision making

Education

PMP or PgMP certification

CISA/CISM/CISSP certification

Tools

SOC 2

PCI DSS

ISO 27001

Job description

Shopee in Indonesia seeks a seasoned Information Security Program Manager to lead the PM team across security sub-teams. You will own portfolio tracking, OKRs, and senior-leadership reporting with data-driven insights.

You will drive end-to-end cross-team programs, define ownership, coordinate audits (SOC 2, PCI DSS, ISO 27001), and push for timely, risk-aware delivery while improving PM processes with automation.