Head of Security

This is a fully remote position, open to applicants in Indonesia.

📋 Description

• Define and spearhead Ajaib’s comprehensive information and cybersecurity strategy across the organization.

• Take ownership of application, cloud, infrastructure, data, identity, and operational security.

• Develop and maintain a security roadmap that aligns with business expansion and product priorities.

• Establish secure software development practices within engineering and product teams.

• Lead security architecture evaluations, threat modeling, penetration testing, vulnerability management, and security assessments.

• Enhance security across mobile applications, APIs, backend services, cloud environments, and third-party integrations.

• Build and manage processes for incident detection, response, investigation, recovery, and post-incident evaluations.

• Develop capabilities for security monitoring, alerting, and threat detection.

• Own standards for identity and access management, including controls for privileged access.

• Assess security risks associated with vendors, partners, and technology providers.

• Collaborate closely with legal, risk, and compliance teams to assist with audits and fulfill financial services and data protection obligations.

• Define security policies, standards, controls, and measurable security KPIs.

• Foster security awareness throughout the organization via training, guidance, and practical support.

• Recruit, develop, and lead a high-performing security team as the function expands.

• Provide clear security updates and risk recommendations to senior leadership.

⛳️ Requirements

• Extensive experience in cybersecurity, information security, or security engineering, including leadership roles.

• Proven experience leading security efforts in fintech, banking, investment, payments, crypto, or similarly regulated technology sectors.

• Strong understanding of application security, cloud security, infrastructure security, data protection, and identity and access management.

• Experience securing mobile applications, APIs, distributed backend systems, and cloud platforms.

• Deep understanding of secure software development practices, threat modeling, vulnerability management, and penetration testing.

• Experience in building or enhancing incident response and security monitoring capabilities.

• Ability to assess security risks and translate them into clear business priorities.

• Experience collaborating with engineering, product, legal, compliance, risk, and executive stakeholders.

• Strong knowledge of recognized security frameworks and control standards.

• Excellent proficiency in written and spoken English.

• Exceptional communication and leadership skills, with the ability to influence teams without hindering delivery.

🏝️ Benefits

• High-impact ownership: shape and lead security for a growing financial platform.

• Meaningful mission: assist in protecting customers as they access stocks, crypto, and global investment products.

• Strategic influence: work directly with senior leaders and help define how security supports the business.

• Technical depth: tackle complex security challenges across mobile, cloud, APIs, data, and financial systems.

• Team-building opportunity: establish the standards, capabilities, and culture that will guide Ajaib’s security organization.