Vendor Security Risk Engineer — Automation & Compliance

Grab; Jakarta Pusat; On-site; IDR 279,000,000 - 390,600,000; Full time

Benefits offered by this job

Term Life Insurance

Medical Insurance

GrabFlex benefits

Parental and Birthday leave

LASA volunteering leave

FlexWork arrangements

Job summary

Grab's Cyber Assurance - Vendor Security team seeks a hands-on professional to drive third-party risk reviews, data validation, and automation across intake, evidence tracking, and reporting in Jakarta onsite.

Reporting to the Principal Cyber Security Specialist, you will work with stakeholders across Procurement, Legal, Privacy, Risk, and Compliance, applying TPRM frameworks to elevate vendor security posture.

Qualifications

• 1+ years of relevant experience or hands‑on exposure in software development, automation, information security, or IT risk.
• Degree or equivalent practical learning in Computer Science, Information Systems, Cybersecurity, Information Technology, or related technical discipline.
• Foundational programming or scripting skills (e.g., Python, Bash, or similar).
• Foundational understanding of core security controls and concepts such as access management, vulnerability management, data protection, incident response, and security testing.
• Strong analytical and reporting skills with ability to review technical evidence and document next steps clearly.
• Interest in AI and emerging tools to streamline workflows and data handling.

Responsibilities

• Work with internal stakeholders to understand assessment needs and translate them into data, workflow, and reporting requirements.
• Gather vendor engagement details including services, data involved, access, hosting, sub-processors, and system integrations.
• Review vendor questionnaires, security evidence, and contract terms against Grab's security requirements and identify gaps.
• Build, test, and maintain automations that reduce manual work, such as data validation, evidence tracking, and assessment reporting.
• Support the mapping and integration of risk data from internal sources and document data quality and workflow assumptions.
• Support reviews of AI vendors under guidance of experienced reviewers.

Job description

Grab's Cyber Assurance - Vendor Security team seeks a hands-on professional to drive third-party risk reviews, data validation, and automation across intake, evidence tracking, and reporting in Jakarta onsite.

Reporting to the Principal Cyber Security Specialist, you will work with stakeholders across Procurement, Legal, Privacy, Risk, and Compliance, applying TPRM frameworks to elevate vendor security posture.