Cyber GRC Lead: Policy, Risk & Compliance

StarHub; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

StarHub Ltd is seeking a Cyber GRC professional to align cybersecurity with business goals, manage policies, standards and frameworks, and oversee regulatory compliance.

In this role you will lead end-to-end governance, risk management, 2nd line assurance, audit readiness, and stakeholder engagement across StarHub IT security.

You will develop policies, monitor risk indicators, maintain risk registers, and provide advisory on cyber risk and policy awareness to senior management.

Qualifications

• More than 3 years of experience in information/cybersecurity and risk management.
• Experience in leading cybersecurity risk assessment and risk reduction initiatives.
• Experience in IT/IT-Security policy development and implementation.
• Experience in driving IT-security thematic assessment and IT audits.
• Good knowledge of cybersecurity regulatory requirements.
• Strong problem analysis and resolution skills.
• Strong stakeholder management skills.

Responsibilities

• Drive end-to-end governance & policy management lifecycle.
• Lead cyber risk management and reporting.
• Lead 2nd line assurance & compliance monitoring.
• Oversee audit engagement with 1st line stakeholders.
• Provide security culture advisory & stakeholder engagement.
• Develop and drive regular monitoring of information security policies.
• Monitor risk indicators and escalate to senior management.
• Maintain risk registers for IT Security / Cybersecurity risks.

Skills

Cybersecurity governance

Risk management

Policy development

Stakeholder management

Audit readiness

Job description

StarHub Ltd is seeking a Cyber GRC professional to align cybersecurity with business goals, manage policies, standards and frameworks, and oversee regulatory compliance.

In this role you will lead end-to-end governance, risk management, 2nd line assurance, audit readiness, and stakeholder engagement across StarHub IT security.

You will develop policies, monitor risk indicators, maintain risk registers, and provide advisory on cyber risk and policy awareness to senior management.