Head of IT Security

Client Overview:

Our client is a confidential emerging cybersecurity services firm in its early growth stage specializing in high-end security solutions to protect digital assets in increasingly complex cloud and decentralized environments. Operating with an agile expert-led approach the company is positioning itself as a premium partner for organizations that require robust defense-in-depth strategies.

The firm offers a comprehensive suite of cybersecurity services including Security Maturity Reviews Cloud Security Posture Reviews Vulnerability Assessment and Penetration Testing (VAPT) and Smart Contract Audits. By combining technical expertise with strategic advisory the company aims to deliver actionable insights and measurable security improvements for its clients.

Job Role:

The company is currently seeking a founding-level technical leader to drive the service delivery and technical roadmap directly alongside the CEO. The Security Consultant (Head Level) is a dual-purpose role combining high-level strategic advisory with deep technical execution.

As the most senior technical authority in this early-stage firm you will be responsible for defining the methodologies for all service linesfrom VAPT to Smart Contract Audits while directly managing high-value client engagements. You will act as the Technical Face of the company ensuring that every assessment delivered meets international security standards and provides actionable business value.

Key Responsibilities:

• Define and standardize technical frameworks for all service offerings (VAPT Cloud Security Posture Security Maturity Reviews) and lead complex security audits translating vulnerabilities into actionable business risks
• Develop Smart Contract Audit capabilities while staying updated on blockchain and DeFi security trends and act as senior consultant for key clients conducting compliance reviews (ISO 27001 SOC2) and building long-term security roadmaps
• Support CEO in pre-sales activities including technical scoping project estimation and solution architecture while managing end-to-end technical client engagements to ensure satisfaction and retention
• Design and deliver security training programs for client teams establish Red Team and Blue Team SOPs and ensure all technical operations comply with local and international cybersecurity regulations
• Recruit mentor and lead a team of security analysts while representing the company in technical forums and security communities to build brand authority

Candidate Requirements:

• Bachelors or Masters degree in Computer Science Information Security or related field; relevant certifications preferred (CISSP CISM OSCP CEH or Cloud Security Engineer)
• 810 years in Cybersecurity including 3 years in leadership or senior consulting roles (e.g. Head of Security Head of IT Strategic Consultant)
• Hands-on technical expertise in VAPT (Web Mobile Network) Cloud Security (AWS Azure GCP) and optionally Smart Contract Audits / Blockchain Security
• Deep knowledge of compliance frameworks: ISO 27001 NIST SOC2 and Indonesian data privacy laws
• Experience across Infrastructure & Network Security Web & Mobile Applications Cloud Security & Governance and Blockchain / Decentralized Technologies
• Strong professional qualities: entrepreneurial mindset independent working style and excellent reporting/presentation skills
• Proven background in consulting audit or multinational environments with client-facing responsibilities
• Professional fluency in English

Job code: #584