Lead Security Management Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Own local information security management compliance for audits and regulatory inquiries, coordinating inspections and preparing evidence for ISO 27001/SOC 2-aligned reviews. Maintain the local compliance system and document library, run gap analyses, and track rectification actions to closure. Support security risk/threat assessments, access control policy reviews, incident response escalation, and third-party supplier risk evaluations, working closely with technical and non-technical teams.

Location: Jakarta, Kuala Lumpur

Employment Type: Full time

Job Function: Administration & Executive Assistance

Seniority: Mid level

Key Responsibilities

•Coordinate regulatory receptions and remote reviews with agencies (e.g., OJK, Bappebti, Kominfo) and explain security management system status, architecture, and controls.
•Prepare audit technical documents and evidence materials (e.g., architecture diagrams, access control instructions, data flow diagrams) and manage regulatory inquiries/rectification until closure.
•Maintain and align the local compliance system with the headquarters ISMS framework, including compliance gap analysis and ongoing document library upkeep for audit readiness.
•Perform information security threat and risk assessments, maintain risk registers, and monitor implementation of access control policies and permission assignments.
•Support security evaluation and audits by coordinating penetration testing/vulnerability scanning execution and working with internal/external audits (e.g., ISO 27001, SOC 2).

Pay and Benefits

Perks:Learning Budget

Key Requirements

•4-5 years of experience in information security, compliance, or a related field.
•Experience supporting regulatory reception or audits (OJK, Bappebti, or Kominfo preferred).
•Familiarity with information security frameworks such as ISO 27001, SOC 2, and NIST (or equivalent standards).
•Experience with gap analysis, threat and risk assessment, and compliance document management.
•Understand access control, incident response processes, and security awareness training; fluent in Chinese and English (Indonesian preferred).

Experience:4-5 yearsInformation securityComplianceAuditing

Skills:Cross-functional coordinationStakeholder communicationDocument managementOrganizational skillsRigor and attention to detail

Certifications:CISACISSPISO 27001 Chief AuditorISO 27001 Chief Implementer

Languages:ChineseEnglishIndonesian

Tech Stack:ISO 27001SOC 2NISTPenetration testingVulnerability scanningISMSAccess controlRisk registersIncident response

Company Brief

Bybit

Website

Loading job details...

Preparing the role view and application actions.

Bybit

2 months ago

Lead Security Management Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Location: Jakarta, Kuala Lumpur

Employment Type: Full time

Job Function: Administration & Executive Assistance

Seniority: Mid level

Key Responsibilities

•Coordinate regulatory receptions and remote reviews with agencies (e.g., OJK, Bappebti, Kominfo) and explain security management system status, architecture, and controls.
•Prepare audit technical documents and evidence materials (e.g., architecture diagrams, access control instructions, data flow diagrams) and manage regulatory inquiries/rectification until closure.
•Maintain and align the local compliance system with the headquarters ISMS framework, including compliance gap analysis and ongoing document library upkeep for audit readiness.
•Perform information security threat and risk assessments, maintain risk registers, and monitor implementation of access control policies and permission assignments.
•Support security evaluation and audits by coordinating penetration testing/vulnerability scanning execution and working with internal/external audits (e.g., ISO 27001, SOC 2).

Pay and Benefits

Perks:Learning Budget

Key Requirements

•4-5 years of experience in information security, compliance, or a related field.
•Experience supporting regulatory reception or audits (OJK, Bappebti, or Kominfo preferred).
•Familiarity with information security frameworks such as ISO 27001, SOC 2, and NIST (or equivalent standards).
•Experience with gap analysis, threat and risk assessment, and compliance document management.
•Understand access control, incident response processes, and security awareness training; fluent in Chinese and English (Indonesian preferred).

Experience:4-5 yearsInformation securityComplianceAuditing

Skills:Cross-functional coordinationStakeholder communicationDocument managementOrganizational skillsRigor and attention to detail

Certifications:CISACISSPISO 27001 Chief AuditorISO 27001 Chief Implementer

Languages:ChineseEnglishIndonesian

Tech Stack:ISO 27001SOC 2NISTPenetration testingVulnerability scanningISMSAccess controlRisk registersIncident response

Company Brief

Bybit

Website