Head of Information Security

1. The Head of Information Security is responsible for defining and leading the enterprise cybersecurity strategy to protect the organization’s information assets, digital platforms, and operational infrastructure. The role ensures security posture aligns with corporate objectives, regulatory requirements, and evolving threat landscapes.

2. This role establishes and enforces cybersecurity governance frameworks, policies, and controls across IT and operational environments. This includes oversight of risk management, security architecture, incident response, data protection, identity and access management, third party security, and business continuity planning.

3. Strategically, this role strengthens organizational resilience by embedding a risk-aware security culture, enhancing threat intelligence capabilities, and ensuring proactive defense mechanisms. The role serves as a trusted advisor to executive leadership and the Board, providing transparency on cyber risks and ensuring security functions as a business enabler rather than a constraint to innovation and growth.

Requirements

1. Security Leadership: 10–15 years leading enterprise cybersecurity in complex, multi-entity environments
2. Technical & Risk Expertise: ISO 27001 / NIST, threat & vulnerability management, incident response
3. Regulatory Knowledge: Strong compliance exposure (incl. OJK, data protection)
4. Architecture Capability: Cloud, network, application, and IT/OT security across industries
5. Executive & Crisis Handling: Clear Board communication and effective incident leadership