job description
Alphaeus Pte. Ltd. is seeking a Senior Information Security Officer to join our dynamic team in Bali. In this critical role, you will lead efforts to strengthen the security posture of our applications, IT infrastructure, cloud platforms, and Operational Technology (OT) systems. As cyber threats evolve, your expertise will be pivotal in safeguarding our digital assets, ensuring compliance, and driving a culture of security awareness across the organization.
This is a contract position offering a competitive salary range of $7,500 – $10,000 per month, reflecting the importance of this role in protecting our enterprise from emerging risks. You will collaborate with cross-functional teams to implement robust security frameworks, conduct risk assessments, and develop mitigation strategies tailored to our unique technological landscape.
If you are a forward-thinking security professional with a passion for innovation and a track record of securing complex environments, we invite you to apply and help shape the future of cybersecurity at Alphaeus.
Responsibility
- Security Architecture & Design: Develop, implement, and maintain security architectures for applications, infrastructure, and cloud platforms to mitigate risks and ensure alignment with industry best practices (e.g., NIST, ISO 27001).
- Risk Assessment & Management: Conduct comprehensive risk assessments, vulnerability scans, and penetration testing to identify and remediate security gaps in systems and processes.
- Compliance & Governance: Ensure adherence to global security standards (e.g., GDPR, PCI-DSS) and internal policies, while documenting compliance for audits and stakeholder reviews.
- Incident Response: Lead the investigation, containment, and resolution of security incidents, including forensic analysis and post-incident reporting to prevent recurrence.
- Cloud & OT Security: Oversee the security of cloud environments (AWS/Azure/GCP) and Operational Technology (OT) systems, implementing controls like IAM, encryption, and network segmentation.
- Security Awareness: Design and deliver training programs to educate employees on security best practices, phishing prevention, and data protection.
- Vendor & Third-Party Risk: Assess and monitor the security posture of vendors, contractors, and third-party integrations to minimize supply chain risks.
- Continuous Improvement: Stay abreast of emerging threats and technologies, recommending proactive measures to enhance the organization’s security resilience.
Qualifications
- Education: Bachelor’s degree in Computer Science, Cybersecurity, or a related field. Advanced certifications (e.g., CISSP, CISM, CCSP, OSCP) are highly preferred.
- Experience: Minimum of 7+ years in information security, with at least 3 years in a senior or leadership role focusing on applications, infrastructure, or cloud security.
- Technical Expertise: Hands-on experience with security tools (SIEM, IDS/IPS, WAF, EDR), scripting (Python/Bash), and cloud security platforms (CSPM, CASB).
- Compliance Knowledge: Deep understanding of regulatory frameworks (e.g., ISO 27001, SOC 2, HIPAA) and experience with compliance audits.
- Problem-Solving: Proven ability to analyze complex security issues, develop actionable solutions, and communicate risks to non-technical stakeholders.
- Leadership: Strong interpersonal skills to mentor junior team members, collaborate with IT/DevOps teams, and influence security culture.
- Industry Awareness: Up-to-date knowledge of cybersecurity trends, threat intelligence, and zero-trust architectures.
- Language: Fluent in English; additional languages (e.g., Indonesian) are a plus.