IT Security Lead

PT Kredit Biro Indonesia Jaya (Credit Bureau Indonesia, “CBI”) as one of the private credit bureaus in Indonesia has been established since 2014 and obtained an operational license from Otoritas Jasa Keuangan (OJK) as Lembaga Pengelola Informasi Perkreditan (LPIP) in 2015.

In November 2021, after obtaining approval from OJK, CBI received additional capital from shareholders and appointed a new management team, which aims to provide new and leading-edge services and products. This new identity will also strengthen CBI's position as the "best-in-class, modern and innovative" credit bureau in Indonesia.

CBI is a trailblazer in the credit bureau industry, dedicated to fostering a culture of excellence and innovation. We believe in the power of a talented and diverse team to bring cutting-edge solutions to our clients and contribute to the overall success of the financial landscape in Indonesia.

Why Join Us

• Innovative Environment: Continuously investing in cutting-edge technologies, including the powerful realm of artificial intelligence, your role becomes a pivotal part of our journey into the dynamic and evolving landscape of financial services. Being part of our innovative environment is your gateway to an exciting and forward-thinking career
• Impactful Work: We offer more than just a job; we provide an opportunity to play a crucial role in shaping the financial future of individuals and businesses across the nation. As a licensed credit bureau, our commitment to accuracy, reliability, and timeliness sets the stage for impactful work
• Professional Development: We are committed to the growth of our employees. Join a team that encourages continuous learning and offers opportunities for career advancement.
• Collaborative Culture: Work in a collaborative and inclusive environment where your ideas are valued, and teamwork is key to achieving our goals.

We are hiring an IT Security Lead to lead our organization's security function end-to-end — strategy, operations, compliance, and team leadership. This person owns the company's overall security posture: network and infrastructure protection, data privacy governance, threat management, and secure handling of critical systems and data.

Key Responsibilities

• Lead day-to-day IT security operations and incident response.
• Monitor, investigate, and report security incidents.
• Coordinate vulnerability assessments with vendor, security reviews, and coordinate remediation.
• Drive application and infrastructure security, including security code reviews.
• Manage and optimize security tools, including SIEM, WAF, MDM, EDR, PAM, Fortianalyzer and vulnerability management.
• Identify security risks and implement mitigation strategies.
• Develop and maintain security policies, standards, and best practices.
• Partner with Infrastructure, Engineering, and DevOps teams to improve security across the organization.
• Stay updated on emerging threats and recommend security improvements.
• Prepare security reports and provide guidance to management and team members.
• Lead, mentor, and grow the security team.

• More than 10 years of experience in IT Security, Cybersecurity, or Information Security, with 2+ years in a senior or lead role.
• Strong knowledge of security frameworks such as OWASP, NIST, CIS Controls, or ISO 27001.
• Hands-on experience with SIEM (Wazuh or similar), WAF, PAM, and endpoint security solutions (EDR and MDM).
• Experience in vulnerability management, incident response, infrastructure security, and application security.
• Exposure to Cloud environment and DevSecOps practices is an advantage.
• Strong analytical, problem-solving, and stakeholder management skills.
• Mandatory certified as: ISC2 CISSP, EC-Council Ethical Hacker, CCNP Security and Data Protection Officer.