Strategic Head of IT Security & Compliance

PT Media Indonusa (Jakarta); Jakarta Utara; On-site; IDR 900,000,000 - 1,300,000,000; Full time

Job summary

PT Media Indonusa (Jakarta) seeks a Head of IT Security to lead the information security function across GRC, Security Engineering, and MIS, shaping policies and controls. You will drive PCI-DSS compliance, ISO/IEC 27001 alignment, risk management, and incident governance while integrating security into IT operations and payments environment.

This leadership role demands a decade in security with at least 3 years in a head role, plus strong communication with management and hands-on

Qualifications

• Minimum 10 years in information security or IT
• At least 3 years in a security leadership role
• Experience leading multiple functions (GRC, security engineering, and/or IT operations)
• Experience in financial services, banking, or payment service providers
• Proven PCI-DSS compliance experience and audit support
• Experience developing information security policies and implementing CIS Benchmarks, ISO/IEC 27001, NIST
• Experience leading security investigations and incident governance
• Technical understanding of cloud, containers/Kubernetes, and payment app architecture

Responsibilities

• Lead IT GRC, IT Security Engineering, and MIS as an integrated function
• Establish and update information security policies and baselines
• Maintain technology risk register and regulatory compliance (PCI-DSS)
• Coordinate security audits and third-party assessments
• Design and oversee technical security controls
• Build monitoring, detection, and alerting for unusual activity (incl. funds)
• Oversee internal IT services (helpdesk, devices, networks, email)
• Manage access controls during onboarding, role changes, and terminations

Skills

GRC

Security leadership

Multi-team leadership

PCI-DSS

Policy development

Risk management

ISO 27001

NIST

Cloud

Kubernetes

Incident governance

Job description

PT Media Indonusa (Jakarta) seeks a Head of IT Security to lead the information security function across GRC, Security Engineering, and MIS, shaping policies and controls. You will drive PCI-DSS compliance, ISO/IEC 27001 alignment, risk management, and incident governance while integrating security into IT operations and payments environment.

This leadership role demands a decade in security with at least 3 years in a head role, plus strong communication with management and hands-on