Cyber GRC Lead: Policy, Risk & Audit Oversight

StarHub; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

StarHub is seeking a Cyber GRC professional to ensure cybersecurity governance aligns with business goals, manage policies, risk oversight, and 2nd line assurance. The role collaborates with 1st line, drives regulatory compliance, and promotes security culture across stakeholders.

Ideal candidates bring 3+ years in information security/risk management, policy development, and IT/audit experience, with strong communication and stakeholder skills.

Qualifications

• More than 3 years of experience in information/cybersecurity and risk management.
• Experience in IT/IT‑Security policy development and implementation.
• Experience in driving IT‑security thematic assessment and IT audits.
• Good knowledge of handling IT‑security audits.
• Good knowledge of cybersecurity regulatory requirements.
• Strong problem analysis and resolution skills.
• Strong stakeholder management skills.

Responsibilities

• Lead end-to-end governance and policy management for information security.
• Lead cyber risk management and reporting.
• Lead 2nd line assurance and compliance monitoring.
• Oversee audit engagement with 1st line stakeholders.
• Develop risk indicators and regular risk reporting to senior management.
• Maintain audit issue trackers and remediation progress.
• Provide awareness and advisory on StarHub policies.

Skills

Cybersecurity risk management

Policy development

IT security audits

Regulatory compliance

Stakeholder management

Risk assessment

Job description

StarHub is seeking a Cyber GRC professional to ensure cybersecurity governance aligns with business goals, manage policies, risk oversight, and 2nd line assurance. The role collaborates with 1st line, drives regulatory compliance, and promotes security culture across stakeholders.

Ideal candidates bring 3+ years in information security/risk management, policy development, and IT/audit experience, with strong communication and stakeholder skills.