Security Compliance Strategist, Vendor Security

Grab; Jakarta Pusat; On-site; IDR 279,000,000 - 390,600,000; Full time

Benefits offered by this job

Term Life Insurance

Medical Insurance

GrabFlex benefits

Parental and Birthday leave

LASA volunteering leave

FlexWork arrangements

Job summary

Grab's Cyber Assurance - Vendor Security team seeks a hands-on professional to drive third-party risk reviews, data validation, and automation across intake, evidence tracking, and reporting in Jakarta onsite.

Reporting to the Principal Cyber Security Specialist, you will work with stakeholders across Procurement, Legal, Privacy, Risk, and Compliance, applying TPRM frameworks to elevate vendor security posture.

Qualifications

• 1+ years of relevant experience or hands‑on exposure in software development, automation, information security, or IT risk.
• Degree or equivalent practical learning in Computer Science, Information Systems, Cybersecurity, Information Technology, or related technical discipline.
• Foundational programming or scripting skills (e.g., Python, Bash, or similar).
• Foundational understanding of core security controls and concepts such as access management, vulnerability management, data protection, incident response, and security testing.
• Strong analytical and reporting skills with ability to review technical evidence and document next steps clearly.
• Interest in AI and emerging tools to streamline workflows and data handling.

Responsibilities

• Work with internal stakeholders to understand assessment needs and translate them into data, workflow, and reporting requirements.
• Gather vendor engagement details including services, data involved, access, hosting, sub-processors, and system integrations.
• Review vendor questionnaires, security evidence, and contract terms against Grab's security requirements and identify gaps.
• Build, test, and maintain automations that reduce manual work, such as data validation, evidence tracking, and assessment reporting.
• Support the mapping and integration of risk data from internal sources and document data quality and workflow assumptions.
• Support reviews of AI vendors under guidance of experienced reviewers.

Job description

Get to Know the Team

Join the Cyber Assurance - Vendor Security team to help make third-party risk reviews more consistent and scalable through hands‑on vendor assessments and practical automation across intake, evidence tracking, and reporting. Partnering with key stakeholders across Procurement, Legal, Privacy, Risk, Compliance, Finance, and Cybersecurity, you will apply a solid foundation in information security and Third-Party Risk Management (TPRM) frameworks to elevate our vendor security posture.

Get to Know the Role

Join a team that prioritizes engineering over administrative overhead. With a clear architectural vision and established stakeholder relationships, this role is dedicated to building the engine: combining practical software engineering with security risk practices to build tools and workflows that standardize vendor assessments. This is an onsite role based in Jakarta. You will be reporting to the Principal Cyber Security Specialist, Cyber & Tech Regulatory Partnership.

The Critical Tasks You Will Perform

• Work with internal stakeholders to understand assessment needs and translate them into clear data, workflow, and reporting requirements.
• Gather vendor engagement details, including services, data involved, access, hosting, sub-processors, and system integrations.
• Review vendor questionnaires, security evidence, and relevant contract terms against Grab's security requirements and identify gaps and prepare evidence based findings.
• Build, test, and maintain scoped automations that reduce repeat manual work, such as data validation, evidence tracking, and assessment reporting.
• Support the mapping and integration of relevant risk data from internal sources, documenting data quality, access, and workflow assumptions.
• Support reviews of AI vendors, including data privacy, model security under the guidance of experienced reviewers.
• Coordinate evidence requests and follow-up actions with vendors and internal stakeholders; maintain review records and surface recurring issues or improvement opportunities.

What Essential Skills You Will Need

• 1+ years of relevant experience or hands‑on exposure in software development, automation, information security, or IT risk (internships, academic coursework, and practical projects are welcomed).
• Degree or equivalent practical learning in Computer Science, Information Systems, Cybersecurity, Information Technology, or a related technical discipline.
• Foundational programming or scripting skills (e.g., Python, Bash, or similar), alongside familiarity with structured data formats and APIs.
• Foundational understanding of core security controls and concepts, such as access management, vulnerability management, data protection, incident response, and security testing.
• Strong analytical and reporting skills, with the ability to review technical evidence, identify gaps, and document actionable next steps clearly.
• Demonstrated curiosity with AI and emerging tools to streamline workflows or boost productivity, accompanied by a solid awareness of data confidentiality and secure data handling.

Good to Have

• Familiarity with vendor risk or security assessments and evidence such as SOC 2 reports, ISO certificates, or penetration test reports.
• Experience using a Governance, Risk, and Compliance (GRC) or third-party risk management platform to manage vendor assessments, evidence, findings, or remediation tracking.
• Exposure to API integrations, document processing, or workflow automation.
• Basic understanding of ISO/IEC 27001, NIST, PCI DSS, or cloud security.

Life at Grab

• We have your back with Term Life Insurance and comprehensive Medical Insurance.
• With GrabFlex, create a benefits package that suits your needs and aspirations.
• Celebrate moments that matter in life with loved ones through Parental and Birthday leave , and give back to your communities through Love-all-Serve-all (LASA) volunteering leave
• We have a confidential Grabber Assistance Programme to guide and uplift you and your loved ones through life's challenges.
• Balancing personal commitments and life's demands are made easier with our FlexWork arrangements such as differentiated hours

What We Stand For At Grab

We are committed to building an inclusive and equitable workplace that provides equal opportunity for Grabbers to grow and perform at their best. We consider all candidates fairly and equally regardless of nationality, ethnicity, race, religion, age, gender, family commitments, physical and mental impairments or disabilities, and other attributes that make them unique.