IT Security Lead

About the Role Star Energy Geothermal, Indonesia's leading geothermal energy producer, is seeking an IT Security Lead to strengthen cybersecurity across our IT and OT environments. The role leads cybersecurity operations, governance, risk management, and incident response to protect our information assets, technology infrastructure, applications, data, and critical operational environments.

Job Description

• Lead the implementation, monitoring, and continuous improvement of cybersecurity controls across infrastructure, endpoints, applications, cloud services, networks, identity platforms, and OT-related environments.
• Coordinate vulnerability management, including scanning, risk assessment, remediation prioritization, patch follow-up, exception handling, and security reporting.
• Oversee security monitoring and threat response across SOC services, endpoint protection, email security, network security, and other security platforms.
• Lead cybersecurity incident response, including investigation, containment, escalation, stakeholder communication, recovery, and post-incident improvement.
• Coordinate identity and access management activities covering privileged access, MFA, user access, provisioning, deactivation, and segregation of duties.
• Support cybersecurity governance, risk, and compliance activities, including ITGC, ISO 27001 alignment, risk assessments, audits, control testing, and remediation tracking.
• Lead cybersecurity awareness initiatives, phishing simulations, user communications, and capability-building activities.
• Collaborate with IT, OT, business, project, vendor, SOC, and security partners to embed cybersecurity requirements into technology projects and operational activities.

Job Requirements

• Education: Bachelor’s degree in Information Technology, Computer Science, Information Systems, Cybersecurity, Engineering, or a related discipline.
• Experience: Minimum 3–5 years of relevant experience in cybersecurity operations, vulnerability management, security monitoring, incident response, identity and access management, infrastructure security, or IT audit support.
• Good understanding of cybersecurity threats, IT/OT security principles, vulnerability management, incident response, ITGC, ISO 27001, NIST, data protection, and technology risk management.
• Experience in multi-site, industrial, energy, or OT-integrated environments will be an advantage.
• Relevant professional certifications such as CompTIA Security+, CEH, CISSP, CISM, ISO 27001, Microsoft Security, cloud security, or network security certifications are preferred.
• Strong analytical, communication, coordination, and stakeholder management skills, with the ability to manage security priorities across technical and business teams.

Why Join Us Join Star Energy Geothermal and play a key role in protecting the technology and critical environments that support reliable, clean energy production. You will work across IT and OT environments , strengthen cybersecurity and operational resilience, and help enable secure digital transformation, cloud adoption, data initiatives, and emerging technologies.