Chief Inmation Security Officer – Indonesia

Chief Information Security Officer – Indonesia Indonesia, Jakarta Security & IT Helpdesk – Security / Full-time: Remote / Remote apply for this job Binance is a leading global blockchain ecosystem behind the world’s largest cryptocurrency exchange by trading volume and registered users. We are trusted by 300+ million people in 100+ countries for our industry-leading security, user fund transparency, trading engine speed, deep liquidity, and an unmatched portfolio of digital-asset products. Binance offerings range from trading and finance to education, research, payments, institutional services, Web3 features, and more. We leverage the power of digital assets and blockchain to build an inclusive financial ecosystem to advance the freedom of money and improve financial access for people around the world. We are seeking an experienced and strategic Chief Information Security Officer (CISO) to lead our cybersecurity, operational resilience, and regulatory compliance initiatives across Indonesia. This role will ensure adherence to Indonesian financial and data protection regulations — including OJK (Otoritas Jasa Keuangan) cybersecurity regulations, Bappebti crypto-asset rules, the Personal Data Protection (PDP) Law (Law No. 27 of 2022), and relevant Bank Indonesia guidelines — while aligning with Binance's global security framework. The ideal candidate will have deep expertise in cybersecurity governance, IT risk management, incident response, and a proven track record in aligning with Indonesian and international regulatory frameworks. This is a hands-on leadership role requiring both strategic vision and operational execution. Responsibilities Strategic Leadership Define and execute the Indonesian cybersecurity and operational resilience strategy aligned with local regulatory requirements and global Binance business objectives. Act as the primary advisor to executive leadership and the board on information security risks and regulatory obligations in Indonesia. Represent Binance in engagements with Indonesian regulators — including OJK, Bappebti, Bank Indonesia, and the Ministry of Communication and Information Technology (Kominfo) — on cybersecurity, data protection, and operational resilience matters. Lead the implementation of cybersecurity programs aligned with OJK Regulation on Cyber Security Management (POJK on Cyber Security), Bappebti crypto-asset regulations, and PDP Law requirements. Regulatory Compliance Lead the design and implementation of security frameworks and controls aligned with:   - OJK Cyber Security Management regulations and governance guidelines   - Bappebti regulations on crypto-asset trading and exchange operations   - PDP Law (UU PDP) — Indonesia's Personal Data Protection Law   - Bank Indonesia payment systems and electronic money regulations (as applicable)   - Kominfo regulations on electronic systems and data protection (PSE framework) Develop and maintain policies, procedures, and documentation to ensure ongoing compliance with Indonesian regulations and international standards. Ensure timely regulatory reporting, breach notifications (including PDP Law's 72-hour notification requirement), and response to regulatory inquiries and audits. Liaise with Indonesian regulatory bodies and ensure proactive engagement on emerging cybersecurity requirements. Risk & Incident Management Oversee risk assessments, security architecture reviews, and cyber risk reporting at the regional level. Implement and maintain incident detection and response capabilities in line with Indonesian regulatory requirements, ensuring proper reporting timelines and impact assessments. Coordinate response to major cyber incidents affecting Indonesian operations, including mandatory breach notifications to OJK/Bappebti/Kominfo as required. Establish and lead the Computer Security Incident Response Team (CSIRT) for Indonesian operations. Third-Party & Supply Chain Risk ...