A seasoned security leader who hasn't lost the practitioner's edge. You think strategically, execute with precision, and earn credibility in both boardrooms and terminal windows. You build teams, close gaps, and raise the security bar — systematically.
A senior who owns both sides of security assessment — offensive execution and assurance governance. You lead a team, set the program strategy, and still get hands-on when it counts. Dual accountability: attack coverage and compliance integrity, all within OCBC Indonesia's CISO function.
Responsibilities:
- Lead, mentor, and grow the security assessment team (Red Team, pentesters, assurance analysts)
- Define and execute the annual security assessment roadmap — both offensive and assurance tracks
- Bridge Red and Blue Teams through structured purple team exercises and detection validation
- Execute and review high-complexity penetration tests hands-on when required
- Build and mature automation pipelines for continuous vulnerability assessment
- Own executive and board-level reporting on security posture, risk, and assessment outcomes
- Manage relationships with third-party assessment vendors and ethical hacking providers
- Champion security-by-design integration within SDLC and infrastructure projects
Qualifications:
- 10+ years in IT security — with substantial depth in both offensive security and security assurance
- Proven track record leading security assessment teams in a regulated financial institution
- Deep expertise: pentesting, red teaming, vulnerability management, risk & compliance frameworks
- Fluent in both manual and automated assessment approaches at program scale
- Strong command of OJK/BI regulatory requirements and banking security standards
- Excellent communicator — equally credible with engineers and stakeholders / regulators
