Cyber GRC Lead: Policy, Risk & Compliance

Starhub Ltd; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Starhub Ltd. seeks a Cyber GRC professional to align information security strategy with business goals, oversee policies and frameworks, and manage cyber risks with independent 2nd line testing. You will drive policy development and governance, engage stakeholders, and support audits to ensure regulatory compliance.

The role requires leadership in governance, risk reporting, and security culture, with emphasis on policy adherence and proactive risk oversight.

Qualifications

• Over 3 years in information/cybersecurity and risk management.
• Experience leading cybersecurity risk assessments and risk reduction initiatives.
• Experience in IT/IT-Security policy development and implementation.
• Experience driving IT-security thematic assessments and IT audits.
• Knowledge of IT-security audits and regulatory compliance requirements.
• Strong problem analysis and resolution skills.
• Excellent stakeholder management abilities.

Responsibilities

• Drive end-to-end governance and policy management lifecycles.
• Lead cyber risk management and reporting activities.
• Oversee 2nd line assurance and compliance monitoring.
• Support audit engagement with 1st line stakeholders.
• Provide advisory and awareness on Starhub information security policies.

Skills

Governance

Risk management

Compliance

Stakeholder management

Policy development

Job description

Starhub Ltd. seeks a Cyber GRC professional to align information security strategy with business goals, oversee policies and frameworks, and manage cyber risks with independent 2nd line testing. You will drive policy development and governance, engage stakeholders, and support audits to ensure regulatory compliance.

The role requires leadership in governance, risk reporting, and security culture, with emphasis on policy adherence and proactive risk oversight.