Head of Security

Your application and all hiring communication for this role run through the Techy Recruiter team. About Ajaib Ajaib is an Indonesian investment platform helping people access and manage investments across stocks, crypto, and U.S. stocks. As the platform continues to grow, protecting our customers, products, and technology is fundamental to maintaining trust. We’re looking for a Head of Security to lead our security strategy and strengthen security across our applications, infrastructure, data, and operations. The role You’ll own security across Ajaib’s technology ecosystem. This is a hands-on leadership role combining strategy, technical depth, risk management, and team development. You’ll define the security roadmap, establish strong security standards, and work closely with engineering, product, infrastructure, legal, compliance, and business teams to ensure security is built into everything we deliver. You’ll be responsible for protecting a high-availability financial platform handling sensitive customer, identity, transaction, and investment data. What you’ll do Define and lead Ajaib’s company-wide information and cybersecurity strategy Own application, cloud, infrastructure, data, identity, and operational security Build and maintain a security roadmap aligned with business growth and product priorities Establish secure software-development practices across engineering and product teams Lead security architecture reviews, threat modelling, penetration testing, vulnerability management, and security testing Strengthen security across mobile applications, APIs, backend services, cloud environments, and third-party integrations Build and oversee incident detection, response, investigation, recovery, and post-incident review processes Develop security monitoring, alerting, and threat-detection capabilities Own identity and access-management standards, including privileged-access controls Assess security risks associated with vendors, partners, and technology providers Work closely with legal, risk, and compliance teams to support audits and meet applicable financial-services and data-protection requirements Define security policies, standards, controls, and measurable security KPIs Build security awareness across the company through training, guidance, and practical support Hire, develop, and lead a high-performing security team as the function grows Provide clear security updates and risk recommendations to senior leadership What you bring Significant experience in cybersecurity, information security, or security engineering, including leadership experience Experience leading security within fintech, banking, investment, payments, crypto, or another highly regulated technology environment Strong knowledge of application security, cloud security, infrastructure security, data protection, and identity and access management Experience securing mobile applications, APIs, distributed backend systems, and cloud-based platforms Strong understanding of secure software-development practices, threat modelling, vulnerability management, and penetration testing Experience building or improving incident-response and security-monitoring capabilities Ability to evaluate security risks and translate them into clear business priorities Experience working with engineering, product, legal, compliance, risk, and executive stakeholders Strong knowledge of recognised security frameworks and control standards Excellent written and spoken English Strong communication and leadership skills, with the ability to influence teams without slowing down delivery Nice to have Previous experience securing investment, trading, brokerage, or cryptocurrency platforms Experience working within the Indonesian financial-technology ecosystem Professional certifications such as CISSP, CISM, CCSP, OSCP, or equivalent Experience with DevSecOps, security automation, and security controls embedded into CI/CD pipelines Experience building a security function or programme during a period of rapid company growth Familiarity with fraud prevention, account-takeover protection, transaction monitoring, and customer-identity security Why join High-impact ownership: shape and lead security for a growing financial platform Meaningful mission: help protect customers as they access stocks, crypto, and global investment products Strategic influence: work directly with senior leaders and help define how security supports the business Technical depth: solve complex security challenges across mobile, cloud, APIs, data, and financial systems Team-building opportunity: establish the standards, capabilities, and culture that will guide Ajaib’s security organisation Notes to Applicants A few things worth knowing before you apply: Interviews may include leadership, technical, and security-scenario discussions. You may be asked to explain how you have handled security incidents, managed risk, influenced engineering teams, or built security programmes in previous roles. Please do not include confidential information, customer data, security findings, or proprietary details from current or previous employers during the interview process. If you need accommodations at any stage of the recruitment process, please let us know in your application. About Techy Recruiter Techy Recruiter is a boutique hiring partner for startups and scaleups across Europe and the Gulf. We run searches end to end and care about a clear, fair process for every person who applies. Equal opportunity We assess people on merit. All applicants are welcome regardless of background, and we do not discriminate on any basis protected by law. Your data We treat your information as confidential and use it only for this hiring process.