IT Senior Manager in Kota Jakarta Selatan at bukuwarung

BukuWarung builds payments, lending and business tools for small merchants, with teams in Indonesia, the Philippines and India and a large field force serving merchants directly. We are growing quickly, and the systems our people use every day need to scale securely with us.

You own how BukuWarung runs its internal technology: the devices, networks, systems and access our employees and field teams rely on, and the security and compliance controls a regulated fintech must meet. You set the direction for IT across three countries, build a team and an operating model that run without you in every decision, and make IT faster, safer and more cost-efficient as we grow. We are looking for someone who works systematically: who turns ad hoc requests into clear policies, frameworks and a roadmap that the whole company can follow.

• IT strategy and operating model: set the IT roadmap, policies and standards across Indonesia, the Philippines and India; run IT as a service, with clear service levels and self-service. Every employee IT enquiry is logged and tracked in one ticketing system, with an automated tracker and dashboard on volumes, response times and recurring issues so root causes get fixed. Common questions are answered automatically through a knowledge base and an AI assistant, so the team focuses on issues that need a person.

• IT policies and frameworks: build a systematic, documented framework for every area of IT, so that decisions follow clear rules rather than case-by-case approvals. This covers IT asset management (procurement, allocation, tagging, tracking, repair, replacement and disposal), office equipment and facilities technology, device entitlement by role, acceptable use, access management, SaaS and software approval, data handling, backup, incident response and vendor management. Each policy has an owner, a review cycle and a clear process employees can follow.

• End-user computing and assets: laptops and mobile devices for office and field teams, from procurement through set-up, repair, replacement and recovery; an accurate asset register in an asset management tool, reconciled with Finance's fixed-asset records; periodic device audits; secure data wiping and disposal; device management (MDM) at scale.

• Joiners, movers and leavers: fast, reliable account and device set-up on day one, and complete access removal and device recovery when people leave, working with the People team.

• Identity, access and SaaS: Google Workspace and core SaaS administration, single sign-on, multi-factor authentication, password management and VPN; role-based access and regular access reviews; software licence compliance, reclaiming unused licences, and SaaS spend control.

• Network and office infrastructure: internet, Wi-Fi, network equipment, CCTV and access systems, and meeting-room technology across offices, including new office set-ups. Map internet and network coverage across every office and site (providers, speeds, redundancy, costs and contract terms) and close the gaps.

• IT security: endpoint protection, patching and vulnerability management, backup, phishing awareness and incident response for corporate IT; security policies employees can follow; and, with Engineering, secure employee access to cloud consoles and internal tools.

• IT compliance and audit: IT general controls, an IT risk register and evidence for regulatory and partner audits (for example Bank Indonesia, OJK and POJK IT risk management, and BSP requirements), alignment with ISO 27001 practices, and data protection under UU PDP and equivalent laws in the Philippines and India.

• Vendors and budget: own the IT budget, negotiate and manage vendors and contracts, approve IT spend, and find savings without lowering service.

• Automation and AI: simplify and automate internal IT processes using scripting and workflow tools, and support the safe adoption of AI tools, including clear rules on what company data can be used where.

• IT service management: run IT support on ITIL practices (incident, request, problem and change management), with clear support tiers and escalation, a knowledge base, and regular reporting on volumes, trends and root causes.

• Business continuity: IT continuity and recovery plans for critical internal systems and offices, tested at least once a year.

This is a senior role because of what it owns. You are the single owner of IT, IT security and IT compliance across three countries in a regulated fintech, accountable to the leadership team, regulators and auditors, and a regular voice in leadership forums. You lead a team of three today plus vendors and managed service partners, and you will build the next layer of the function as we grow. You combine setting direction with hands-on work where it is needed. We are looking for a leader who:

• Problem and influence: anticipates IT risks and conflicts between functions before they occur; thinks from first principles and designs company-level solutions, not one-off fixes; makes sound decisions under uncertainty with incomplete data; is a regular presence in leadership forums and builds alignment with Finance, People, Legal, Risk and business leaders.

• Scope and impact: owns a multi-workstream IT portfolio (service, infrastructure, security, compliance, assets and vendors) across three countries; accountable for function-level goals and the IT roadmap, not only team delivery; manages the team and a network of vendors and managed service partners with clear accountability, and gets the reach of a larger function through automation and self-service.

• Leadership accountability: grows each team member into the owner of an area (for example support, infrastructure, or security and compliance) and develops at least one into a future team lead; creates an environment where people use their strengths; drives a performance culture, raising the bar and addressing underperformance early; builds succession depth so the function does not depend on one person.

• Execution excellence: holds the team and vendors to service standards without micromanaging, creating accountability through clarity rather than oversight; writes concisely for senior leaders, auditors and regulators; addresses delivery failures directly and quickly; builds operating cadences (service reviews, access reviews, audit readiness) that run without them in every meeting or decision.

• At least 10 years in IT operations, infrastructure or IT service management, including at least 5 years in managerial roles, with experience leading a full IT function or a multi-workstream IT remit, through team leads or a mix of internal staff and vendors.

• Has built or rebuilt an IT function, not only run one: designed the team structure, hired and developed the team, and put the first policies, tools and service levels in place.

• Has scaled IT through fast growth, for example doubling headcount, opening new offices or entering new countries, while keeping service and security steady.

• Has led major IT programmes end to end, such as identity or email migrations, tool consolidation, office moves or new-country set-ups, including change management and training for non-technical users.

• Has taken an organisation through a security certification or a major regulatory audit (for example ISO 27001 or SOC 2), or led the response to a serious IT or security incident.

• Has made build, buy or outsource decisions (for example managed service providers for support or field coverage) and built business cases and multi-year IT budgets.

• Reports IT performance and risk to executive leadership in business terms, and is comfortable being hands-on when a growing company needs it.

• Experience in fintech, banking, payments or another regulated industry, including preparing for IT or security audits; working knowledge of OJK/POJK IT requirements and UU PDP.

• Hands-on depth in Google Workspace (or Microsoft 365), device management (MDM), identity and access management (SSO, MFA, password management, VPN), networking and endpoint security, plus scripting or automation (for example Google Apps Script, Python or PowerShell).

• Experience running IT across multiple sites or countries, including a distributed or field workforce.

• A track record of managing IT budgets and vendors, and of improving service while reducing cost.

• Working knowledge of ITIL, ISO 27001 and frameworks such as NIST CSF or SOC 2; certifications such as ITIL, CISA, CISM, CISSP, ISO 27001 Lead Implementer or Lead Auditor, or an IT asset management certification are a plus.

• Experience implementing an IT service management (ticketing) tool and an asset management tool, and building self-service, knowledge bases and automation on top of them.

• Experience working closely with Engineering, Finance, Legal, Risk and People, and presenting IT risks and plans to senior leaders.

• Clear written and spoken English and Bahasa Indonesia.

First 90 days: understand current IT, security and audit gaps across all three countries; agree service levels and a 12-month IT roadmap with leadership; map internet and network coverage across all sites; set up an automated tracker for every employee IT enquiry and automated answers to the most common questions; publish the IT policy framework (starting with asset management, office equipment, device entitlement and access); put an accurate asset register and access review in place.

First 12 months: new joiners are fully set up on day one and leavers lose access the same day; IT audit findings are closed and evidence is ready on request; SaaS and device spend is under control; the team runs day-to-day IT without escalation.

• Service levels: every IT enquiry tracked, ticket response and resolution times, and employee satisfaction with IT.

• Joiner and leaver timeliness: day-one readiness and same-day access removal.

• Security and compliance: audit findings closed, access reviews completed, devices compliant with security policy.

• Governance: IT policies published, owned and reviewed on schedule; roadmap milestones delivered.

• Assets and licences: asset register accuracy at each device audit, reconciliation with Finance, and unused licences reclaimed.

• Cost: IT and SaaS spend against budget, and savings delivered.

• Team: retention, development and successor readiness.

Build and own the IT function of a fast-growing fintech across Indonesia, the Philippines and India. You will have real scope to set direction, a seat at the table with leadership, and a direct impact on how our colleagues and field teams work every day, in a company where pace and ownership are valued. You will build the next layer of the function as the company grows.