Senior IT & Cloud Security Lead

Simplifa.ai; Jakarta Pusat; On-site; IDR 300,000,000 - 600,000,000; Full time

Job summary

Simplifa, located in Jakarta, Indonesia, seeks an IT Infrastructure Senior Security Officer to lead security operations, cloud and endpoint protection, and IAM governance across Google Cloud Platform and internal tools. You will coordinate vendor-led penetration tests, maintain audit-ready artifacts for ISO 27001, and serve as the primary security contact for auditors, partners, and financial institutions.

Join a team committed to strengthening financial literacy and security while balancing

Qualifications

• Hands-on IT security operations, hardening, endpoint security, or cloud infrastructure security.
• Practical knowledge of cloud security fundamentals and infrastructure (GCP and Google Workspace).
• Strong understanding of network security fundamentals (TCP/IP, DNS, routing, firewalls, segmentation).
• Experience managing identity and access controls (IAM, GitHub, Databases, third parties).
• Ability to organize, maintain, and explain audit-ready security evidence documentation.
• Experience leading, coordinating, or supporting vendor-led penetration tests.
• Comfortable working independently as the sole security owner, with strong follow-through with related parties.
• Clear communication skills for technical and non-technical stakeholders.
• Experience supporting security audits or compliance (ISO 27001 preferred).

Responsibilities

• Conduct end-to-end IT security operations, including device/endpoint security and IAM.
• Perform endpoint compliance checks and hardening and enforce remediation.
• Implement and review access controls across GCP IAM, GitHub, databases, and internal tools.
• Own and implement cloud security assurance by verifying baselines and tracking gaps.
• Maintain audit-ready security evidence for ISO 27001 and enterprise customer requests.
• Lead and coordinate vendor-led penetration tests, including scoping and remediation tracking.
• Provide high-level oversight of web application security with engineers.
• Manage system access during onboarding, role changes, and offboarding.
• Make security design decisions considering cost, performance, and operational impact.
• Act as the single security contact for auditors, partners, and banks; escalate to the CTO when required.

Skills

IT security operations

Endpoint security

Cloud security (GCP)

IAM management

Audit-ready evidence

Penetration testing coordination

Stakeholder communication

Independent security ownership

Tools

Google Cloud Platform

GitHub

Databases

Google Workspace

Job description

Simplifa, located in Jakarta, Indonesia, seeks an IT Infrastructure Senior Security Officer to lead security operations, cloud and endpoint protection, and IAM governance across Google Cloud Platform and internal tools. You will coordinate vendor-led penetration tests, maintain audit-ready artifacts for ISO 27001, and serve as the primary security contact for auditors, partners, and financial institutions.

Join a team committed to strengthening financial literacy and security while balancing