Global Cybersecurity Strategy & Risk Leader

Grab; Singapore; On-site; SGD 250,000 - 420,000; Full time

Job summary

Grab, a leading technology company in Singapore, seeks an accomplished cybersecurity leader to own and drive global security strategy across cloud, networks, and applications. You will steer defense, assurance, and secure software practices, aligning risk with business goals.

The role requires executive-level communication with the board, governance on PDPA/PCI-DSS, and acceleration of incident response and resilience through modern security tooling and AI/ML initiatives.

Qualifications

• Define and implement global cybersecurity strategy aligned with business goals and threats.

Responsibilities

• Lead Cyber Defence, Cyber Assurance, and Application Security teams toward continuous improvement.
• Advise Executive, Board Audit, and Risk Committee on ecosystem security decisions.
• Drive GRC strategies ensuring PDPA, PCI-DSS, and regional regulatory compliance.
• Oversee incident response, disaster preparedness plans, and regular response testing.
• Secure AWS, GCP, Azure, containers, Zero Trust architectures, and APIs.
• Design secure networks and oversee mobile and web application security practices.
• Integrate security into CI/CD pipelines using SIEM, SOAR, and automation tools.
• Manage threat modelling, digital forensics, and blue team and red team exercises.
• Oversee penetration testing to identify vulnerabilities and strengthen application security.
• Lead AI and ML adoption for cybersecurity and industry thought leadership initiatives.

Skills

Cybersecurity leadership

Cloud security

Risk management

Regulatory compliance

Tools

SIEM

SOAR

Cloud platforms (AWS/GCP/Azure)

Job description

Grab, a leading technology company in Singapore, seeks an accomplished cybersecurity leader to own and drive global security strategy across cloud, networks, and applications. You will steer defense, assurance, and secure software practices, aligning risk with business goals.

The role requires executive-level communication with the board, governance on PDPA/PCI-DSS, and acceleration of incident response and resilience through modern security tooling and AI/ML initiatives.