Cybersecurity Information Security & Data Privacy Officer (Jakarta)

Meratus Group is a leading integrated maritime and logistics operator in Indonesia, pioneering innovative solutions that drive efficiency and sustainability in the industry. With a rich history dating back to 1957, Meratus has evolved into a powerhouse, operating over 45 shipping routes, a fleet of 100 vessels, and a network of container terminals and logistics centers.

At Meratus, we are committed to digitalization, innovation, and transformation, ensuring seamless logistics and maritime services across Indonesia and Southeast Asia. Our customer-centric approach and agile operations empower businesses to navigate complex supply chain challenges with confidence.

We take pride in fostering a dynamic and inclusive workplace, where talented professionals can thrive and contribute to shaping the future of maritime logistics. Join us and be part of a team that is redefining industry standards while making a meaningful impact on global trade and sustainability.

Position Overview : Cybersecurity, Information Security & Data Privacy Officer (Governance) is responsible for supporting information security governance, cybersecurity compliance, risk management, and data privacy initiatives across the organization.

Responsibilities : 

• Policy & Framework Management: Develop, review, and maintain information security and data privacy policies, standards, and guidelines based on ISO 27001, NIST, and COBIT frameworks.
• Risk Assessments: Lead information security risk assessments, perform third-party/vendor risk reviews, and monitor corporate risk registers and treatment plans.
• Compliance & Audit Coordination: Assist internal and external security audits, tracking findings and remediation action plans.
• Privacy Governance: Support Personal Data Protection (PDP) compliance initiatives and privacy governance across all enterprise business lines.
• Security Awareness: Design, execute, and evaluate company-wide cybersecurity awareness and information security training programs.
• Enterprise Collaboration: Participate in broader enterprise risk management, business continuity planning, cyber resilience programs, and secure cloud adoption governance.

Requirements : 

• Bachelor's degree in Cybersecurity, Information Security, Computer Science. 
• 2 - 3 years of dedicated experience in IT Governance, Risk, and Compliance (GRC) or Data Privacy.
• Deep knowledge of Indonesian PDP regulations, ISO 27001 implementation, and NIST frameworks.
• Proven experience handling internal/external audits and building risk registers.
• Excellent documentation, reporting, and presentation skills.