Senior Infosec and Compliance

Mekari is Indonesia's no. 1 Software-as-a-Service (SaaS) company. With our ecosystem of software solutions—including Mekari Jurnal, Mekari Talenta, Mekari Qontak, and Mekari Flex, we aim to facilitate entrepreneurs and leaders as they accelerate the digital transformation of their businesses. In our 10+ years of journey we have reached over 1 Million platform users, and we're not planning to stop any time soon. We need more people like you: builders and owners with calculated ambition who are ready to #ElevateThroughImpact and raise Indonesia's software standard. Job Summary: Identifying threats, implementing programs, collaborating on policies, reporting findings, and staying up-to-date on industry best practices. Job Description: Move beyond risk identification to proactively develop and implement a comprehensive information security program aligned with business objectives and industry best practices. Take ownership of GRC initiatives, fostering a culture of compliance and risk awareness across the organization. Champion the integration of Governance, Risk, and Compliance practices. Utilize your in-depth knowledge to assess the impact of emerging technologies and threats on the organization's security posture. Provide guidance and mentorship to junior security personnel, fostering a team of highly skilled information security professionals. (This can be implied but not explicitly stated) Collaborate with stakeholders to identify, assess, and mitigate potential risks. Implement and maintain compliance programs, ensuring adherence to regulations and internal policies. Lead the development and update of internal policies and procedures to reflect best practices and regulatory requirements. Prepare insightful reports on the organization's risk profile, security incidents, and compliance status, recommending improvement actions. Continuously stay updated on the latest security trends and technologies to effectively manage evolving threats. Requirements: Bachelor's degree in Information Systems, Computer Science/ Engineering, or equivalent is preferred. Display strong analytical and problem-solving skills to tackle complex GRC (Governance, Risk Management, and Compliance) issues. Proficient in drafting company policies and regulations. Knowledge or familiarity about International Standard Organization (ISO) 27001 and other information security standards Skilled or knowledgeable in risk assessment, implementing mitigation strategies, and managing crises Show exceptional communication abilities for effective collaboration. Uphold ethical standards and integrity in handling confidential and sensitive information. What You Will Get: 1. Competitive salary + daily allowance. 2. Premium private health insurance (outpatient, inpatient, maternity, dental). 3. Early access to salary + flex installment (employee loan) via Mekari Flex. 4. Allowance for sports activities and glasses/contact lenses. 5. Flexible working hours with a hybrid work culture. 6. Annual and unpaid leaves from day 1 of join date + unlimited sick leave with doctor note. 7. Notebook Ownership Program. 8. Strategic office location, accessible by MRT. 9. Friendly and dynamic work environment. 10. Opportunity to build impactful solutions with Indonesia's no. 1 SaaS company. Our team will review your application and will be in touch if your application is shortlisted to the next stage. If you do not hear from us in 30 days, we will keep your resume on file in case a relevant opportunity opens up. Don't forget to check our Recruitment FAQ at https://bit.ly/FAQMekariRecruitment [ENG] or https://bit.ly/FAQRekrutmenMekari [INA] to find the answers to commonly asked questions regarding our recruitment process. We wish you the best. Hope to see you around soon!