Security Operations Senior Manager - CISO

 

As part of our Information Security function, we need a leader who can fully own, manage, respond to, and investigate cybersecurity incidents. As the Security Operations Senior Manager, this person will lead a team of highly technical responders and will need to have a vision to ensure continuous improvement and maintain a high-performing team. The scope includes incident management, threat detection, and digital forensic investigation in combination with root-cause analysis of security flaws and vulnerabilities. The role is also expected to develop elegant solutions to complex problems and apply appropriate technologies while following security engineering best practices.

Be the leader for the incident response team - manage, empower, nurture, support, and guide the team, and bring out the best in them

Effectively manage and lead cyber incidents (end-to-end) according to the incident response process and playbooks. Also, support operational security remediation activities based on lessons learned from post-mortem investigations of incidents.

Manage the various stakeholders (business and technical) during an incident with timely reporting and updates; manage the cybersecurity incident response and investigation on network, endpoint, and cloud infrastructure

Manage the work deliverables of their team and can set goals and priorities throughout the year

Provides strategic inputs into budget management and planning and other business activities, and also supports the Security Engineering team

Provides coaching, feedback, developmental opportunities, etc. to direct/indirect reports within a broader team

Build relationships with stakeholders and leadership across the organization to influence change and drive consistency with Information Security standards. Also enable collaboration, provide oversight, and guidance for periodic security assessments and improvements

Research and analyze local and global cyber threats that could impact the company.

Successfully lead major incidents and investigations that involve various stakeholders

Seasoned leader who can manage a team of responders and investigators

Experience in managing senior stakeholders (including C-suites and Board of Directors) and a seasoned leader who can manage a team of responders and investigators

Experienced in conducting investigations within cloud and SaaS platforms (eg AWS, GCP, Tencent Cloud, Alibaba Cloud, O365, G Suite, containers, etc), SIEMs, SOAR and other automation, etc.

Experienced in working with the Security Engineering team: DevSecOps, Offensive Security, Cloud Security, Security Architecture

Ability to derive and translate technical jargon to business impact, and experience in driving change (organizational, cultural, and process) needed to respond to current and emerging threats

Experience in relevant industries (e.g., eCommerce, Logistics, FinTech, Banking) is a plus

Certified in one or more of the following security certifications is a plus: CISSP, CISA, CISM, SANS GIAC, or other relevant security certifications

 

At GoTo, trust isn't just something we talk about—it’s built into every line of code, every transaction, and every interaction across our ecosystem.

 

Our CISO function is the backbone of that trust. We are a team of world-class security engineers, risk strategists, and ethical hackers dedicated to creating a safe, resilient, and dependable digital ecosystem for millions of users, driver-partners, and merchants across Indonesia and beyond.

 

We don't view security as a wall that slows innovation down. Instead, we act as the high-performance brakes on a race car—allowing GoTo’s product, engineering, and business teams to move faster, dream bigger, and build bolder, knowing our platforms are protected by cutting-edge defenses. Whether we are engineering automated threat responses, performing deep red-teaming simulations, or embedding security into modern CI/CD pipelines, our mission remains clear: to make GoTo the safest, most trusted digital platform in Southeast Asia.

GoTo is the largest digital ecosystem in Indonesia. GoTo's mission is to 'empower progress' by offering technology infrastructure and solutions that help everyone to access and thrive in the digital economy.

The GoTo ecosystem provides a wide range of services, including mobility, delivery, payments, financial services, and technology solutions for merchants. The ecosystem also provides e-commerce services through Tokopedia and banking services through its partnership with Bank Jago.

Gojek is Southeast Asia’s leading on-demand platform and pioneer of the multi-service ecosystem with over 2.5 million driver partners across the regions offering a wide range of services such as transportation, food delivery, logistics and more. With its mission to create impact at scale, Gojek is committed to resolving consumer problems and raising standards of living by connecting consumers to the best providers of goods and services in the market.

GoTo Financial accelerates financial inclusion through its leading financial services and merchants solutions. Its consumer services include GoPay and GoPayLater and serve businesses of all sizes through Midtrans, Moka, GoBiz Plus, GoBiz, and Selly. With its trusted and inclusive ecosystem of products, GoTo Financial is open to new growth opportunities and aims to empower everyone to Make It Happen, Make It Together, Make It Last.