Senior Project Manager, Information Security

Shopee; Indonesia; On-site; IDR 600,000,000 - 1,200,000,000; Full time

Job summary

Shopee in Indonesia seeks a seasoned Information Security Program Manager to lead the PM team across security sub-teams. You will own portfolio tracking, OKRs, and senior-leadership reporting with data-driven insights.

You will drive end-to-end cross-team programs, define ownership, coordinate audits (SOC 2, PCI DSS, ISO 27001), and push for timely, risk-aware delivery while improving PM processes with automation.

Qualifications

• At least 5 years of full-time project or program management, incl. 2 years leading a team.
• Proven delivery of complex, multi-team programs in information security, infra, cloud or IT risk.
• Hands-on experience with at least one external audit or certification (SOC 2, PCI DSS, ISO 27001).
• Strong stakeholder management across cultures and time zones with persistent commitments.
• Able to run many programs in parallel and make clear priority trade-offs.

Responsibilities

• Own portfolio tracking, quarterly OKRs and monthly program status reports to senior leadership.
• Drive cross-team programs end to end: milestones, dependencies and committed dates.
• Define clear ownership and accountability for cross-team programs with named owners.
• Coordinate audits such as SOC 2, PCI DSS, ISO 27001 and MAS TRM with evidence and timelines.
• Track findings to closure across security and engineering teams.
• Improve PM processes, trackers and dashboards with automation and AI.

Skills

Project management

Stakeholder management

Audit/compliance coordination

Cross-team leadership

Data-driven decision making

Education

PMP or PgMP certification

CISA/CISM/CISSP certification

Tools

SOC 2

PCI DSS

ISO 27001

Job description

Job Description:

Lead the Information Security project management team, covering programs across all security sub-teams.

• Own portfolio tracking, quarterly OKRs and the monthly program status report to senior leadership, with clear owners, dates, risks and asks, backed by data.
• Drive cross-team programs end to end: plan milestones, manage dependencies and secure committed dates from engineering, IT and business partners.
• Define clear ownership and accountability for cross-team programs, so every deliverable has a named owner.
• Coordinate compliance and audit programs such as SOC 2, PCI DSS, ISO 27001 and MAS TRM, including control owners, evidence, timelines and remediation of findings.
• Track red-team, penetration-test and vulnerability findings to closure across security and engineering teams.
• Run program cadences, challenge unrealistic timelines with facts, risk and priority, and escal ... early with options and a clear ask.
• Improve project management processes, trackers and dashboards, using automation and AI to reduce manual follow-up.

Requirements:

• At least 5 years of full time project or program management, including at least 2 years leading a team of project managers.
• Proven delivery of complex, multi-team programs in information security, infrastructure, cloud or IT risk.
• Hands-on experience with at least one external audit or certification, such as SOC 2, PCI DSS, ISO 27001 or a financial regulator's technology risk review.
• Strong stakeholder management across cultures and time zones, persistent in driving commitments while keeping relationships strong.
• Able to run many programs in parallel and make clear priority trade-offs.
• Working knowledge of security and infrastructure concepts, and a structured, data-driven way of working.
• PMP, PgMP, CISA, CISM or CISSP certification, experience in banking or other regulated industries are a plus.