Head of IT Risk & Security

a Senior role has Head of IT Security has just become available in a leading Financial Services company in Jakarta, Indonesia.

HEAD OF INFORMATION TECHNOLOGY RISK AND SECURITY

Salary: Competitive and based on experience
Location: Jakarta

Keywords: Personal Data Protection, IT Risk, GRC Compliance, Cyber Security Frameworks, Supportive Leadership, Flexible Working Opportunities, Training Opportunities

A leading financial services organisation in Jakarta is seeking a Head of Information Technology Risk and Security to champion the safeguarding of critical information assets and ensure robust compliance with regulatory standards. This pivotal position offers you the opportunity to shape the future of IT risk management, data protection, and cyber security within a supportive environment that values your expertise and commitment to excellence. You will play a key role in developing and implementing comprehensive strategies that protect sensitive data, foster a culture of security awareness, and ensure alignment with global best practices. The organisation is committed to providing flexible working opportunities, ongoing training, and a collaborative atmosphere where your contributions are recognised and celebrated. If you are passionate about making a meaningful impact on organisational resilience while nurturing a culture of trust and dependability, this is the perfect role for you.

* Take ownership of all aspects of IT risk management, personal data protection, GRC compliance, and cyber security frameworks across the organisation, ensuring policies are both effective and aligned with international standards.
* Enjoy flexible working opportunities and access to continuous professional development through tailored training programmes designed to enhance your knowledge and support your career growth.
* Join a knowledgeable team that values collaboration, inclusivity, and supportive leadership, empowering you to make significant contributions while fostering an environment where everyone can thrive.

What you'll do:

As Head of Information Technology Risk and Security based in Jakarta, you will be entrusted with shaping the organisation’s approach to safeguarding its most valuable digital assets. Your day-to-day activities will involve designing robust frameworks for managing IT risks while ensuring strict adherence to personal data protection regulations. You will work collaboratively with various departments to embed a culture of vigilance around cyber threats—delivering engaging training sessions that empower colleagues at every level. By conducting detailed audits and assessments, you will identify areas for improvement in existing controls before implementing innovative solutions that strengthen overall resilience. Your ability to communicate complex concepts clearly will be essential as you report on key metrics to senior stakeholders. In addition to internal responsibilities, you will build trusted networks externally—keeping abreast of industry developments so your strategies remain current. Success in this role means not only protecting information but also inspiring confidence throughout the organisation by demonstrating unwavering commitment to ethical conduct and operational excellence.

* Develop, implement, and maintain comprehensive IT risk management strategies that align with organisational objectives and regulatory requirements.
* Oversee the design and execution of policies related to personal data protection, ensuring full compliance with local and international privacy laws.
* Lead the governance, risk management, and compliance (GRC) initiatives by establishing frameworks that promote transparency, accountability, and continual improvement.
* Monitor emerging cyber threats and vulnerabilities while coordinating proactive measures to mitigate risks across all digital platforms.
* Collaborate closely with cross-functional teams to raise awareness about information security best practices through regular training sessions and communication campaigns.
* Conduct thorough risk assessments and audits of IT systems, identifying potential weaknesses and recommending practical solutions for remediation.
* Manage incident response protocols by guiding teams through detection, containment, investigation, and recovery processes in the event of security breaches.
* Report regularly to senior management on the status of IT risk exposure, compliance metrics, audit findings, and progress against strategic objectives.
* Foster strong relationships with external auditors, regulators, vendors, and industry peers to stay informed about evolving trends in cyber security.
* Champion a culture of shared responsibility for information security by mentoring staff members at all levels.

What you bring:

To excel as Head of Information Technology Risk and Security in this forward-thinking organisation based in Jakarta, your background should reflect substantial hands-on experience managing complex IT risk environments within regulated sectors. Your deep familiarity with personal data protection laws ensures that sensitive information remains secure at all times. You bring proven expertise in building GRC frameworks from the ground up—balancing regulatory demands with practical business needs. Your broad knowledge base covers everything from cyber threat intelligence gathering through incident response coordination; however it is your ability to connect these technical elements with real-world outcomes that sets you apart. You are known for your empathetic approach when collaborating across departments—always striving for consensus while maintaining high standards. Your clear communication style makes even intricate topics accessible so everyone feels empowered rather than overwhelmed by security requirements. With an eye for detail yet an appreciation for big-picture strategy—you consistently deliver results that inspire trust among colleagues at every level. Above all else: your enthusiasm for sharing knowledge helps cultivate an inclusive learning environment where everyone feels supported on their journey towards greater resilience.

* Demonstrated experience in IT risk management within large-scale organisations or regulated industries such as financial services or telecommunications is highly desirable.
* In-depth understanding of personal data protection principles including GDPR or equivalent regional legislation is required for this position.
* Proven track record in designing and implementing GRC frameworks that drive compliance with both local regulations and international standards such as ISO 27001 or NIST.
* Comprehensive knowledge of cyber security frameworks including threat modelling, vulnerability assessment methodologies, incident response planning, and business continuity management is essential.
* Exceptional interpersonal skills enabling you to collaborate effectively across diverse teams while promoting a culture of shared responsibility for information security.
* Excellent written and verbal communication abilities allowing you to translate technical concepts into actionable guidance for non-technical audiences.
* Experience managing relationships with external auditors or regulatory bodies is advantageous for this role.
* Strong analytical skills coupled with attention to detail enable you to identify risks proactively before they escalate into major issues.
* Commitment to ongoing professional development demonstrated by relevant certifications such as CISM, CISSP or CRISC would be beneficial but not mandatory.
* A passion for nurturing talent through mentoring junior staff members or leading training initiatives is highly valued.

What sets this company apart:

This organisation stands out as a leader in Jakarta’s financial services sector due to its unwavering dedication to employee wellbeing alongside operational excellence. Here you will find an inclusive workplace culture built on mutual respect—where every voice matters regardless of job title or tenure. Flexible working arrangements allow you to balance professional ambitions with personal commitments without compromise; meanwhile generous investment in ongoing training ensures your skills remain sharp amid ever-evolving technological landscapes. The leadership team prioritises open communication channels so feedback flows freely both ways—enabling rapid adaptation when new challenges arise. Employees benefit from being part of a knowledgeable network where collaboration trumps competition; successes are celebrated collectively rather than individually. Whether you’re looking for opportunities to mentor others or simply want space to grow at your own pace: this is an environment where ambition meets empathy—and where long-term careers flourish thanks largely due supportive infrastructure underpinning daily operations.

What's next:

If you are ready to take on this rewarding challenge while making a lasting impact on organisational resilience—your next career move starts here!

Apply today by clicking on the link provided below; we look forward to welcoming your application.

Due to the high volume of applications we are experiencing, our team will only be in touch with you if your application is shortlisted.