Deskripsi Pekerjaan
Are you a strategic leader in Information Security Governance? Mid Solutions Nusantara is seeking a visionary Principal InfoSec Governance & Compliance professional to elevate our security posture. In this senior individual contributor role, you will champion the philosophy that governance and compliance should be powered by robust systems and automation, not manual spreadsheets.
In this pivotal position, you will architect and maintain our Information Security Management System (ISMS), ensuring full compliance with ISO 27001, SOC 2, and relevant local regulations. You will lead internal audits, drive risk remediation strategies, and foster a culture of security awareness across the organization. If you are ready to move beyond documentation and build a resilient, automated compliance framework, we want to hear from you.
Tanggung Jawab
- Design, implement, and maintain the ISMS framework aligned with ISO 27001 and SOC 2 standards.
- Lead internal and external audits to ensure continuous compliance and identify gaps in security controls.
- Oversee the identification, assessment, and mitigation of information security risks across the enterprise.
- Develop and update information security policies, procedures, and standards to address evolving threats.
- Manage vendor risk assessments and third-party security compliance audits.
- Collaborate with IT and Legal teams to ensure adherence to UU ITE (Indonesian Electronic Information and Transactions Law) and international privacy regulations.
- Drive security awareness training programs and cultivate a 'security-first' organizational culture.
Kualifikasi
- Certification such as CISSP, CISM, CRISC, or ISO 27001 Lead Auditor is highly preferred.
- Minimum of 8-10 years of experience in Information Security Governance, Compliance, or Risk Management.
- Strong understanding of ISO 27001, SOC 2, GDPR, and local Indonesian data privacy regulations.
- Proven experience in building automated compliance frameworks and moving away from manual spreadsheets.
- Excellent analytical skills with the ability to interpret complex data and regulatory requirements.
- Strong communication and stakeholder management skills to influence cross-functional teams.
- Experience in a similar role within a digital solutions or consulting environment is a plus.