GSRA Risk Mitigation Specialist, APAC

Google; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

Google in Singapore seeks an expert to lead end-to-end physical security risk assessments across global and regional sites. You will partner with analysts to identify threats, work with testing teams to uncover vulnerabilities, and translate findings into actionable risk insights for leadership.

You will collaborate with facility and security managers, develop practical mitigation strategies, and help embed lessons into global security standards and building guidelines.

Qualifications

• Bachelor's degree in Security Risk Management or equivalent practical experience.
• 10 years of experience designing and implementing security resilience programs with multiple risk stakeholders in a regional and global capacity.
• 5 years of experience in program management developing risk management solutions and influencing stakeholders at all levels.
• Experience in security consulting, law enforcement, security services or military in a regional context.
• Experience with internal and external companies/functions.
• Experience or knowledge with regional/global security operations at Google, and familiarity with the international operating environment.
• Excellent attention to detail and proficiency in risk management tools, concepts and methodologies.
• Ability to influence multiple stakeholders with SME application and experience.

Responsibilities

• Coordinate with wider GSRS teams and physical Red Teams to plan and execute threat based global and regional physical security risk assessments and vulnerability assessments following GSRS risk methodology.
• Conduct, lead, support, and facilitate the production of threat led global and regional physical security risk assessments on behalf of GSRS.
• Communicate complex risk information and compliance requirements clearly and concisely to technical and non technical stakeholders, leading and facilitating collaborative stakeholder risk workshops.
• Partner closely with risk category owners to develop suggested risk treatment strategies, collaborating with regional remediation teams to monitor the effectiveness of deployed controls.
• Contribute to the development and enhancement of physical risk management policies, procedures, and operational security standards to meet regulatory standards, acting as an SME on emerging physical security threats, best practices, evolving mitigation strategies, and localized regulations.

Skills

Security risk management

Stakeholder management

Risk assessment

Program management

Regional/global security experience

Attention to detail

SME influence

Education

Bachelor's degree in Security Risk Management

Tools

Risk management tools

Job description

Google will be prioritizing applicants who have a current right to work in Singapore, and do not require Google's sponsorship of a visa.

Minimum qualifications

• Bachelor's degree in Security Risk Management or equivalent practical experience.
• 10 years of experience designing and implementing security resilience programs with multiple risk stakeholders in a regional and global capacity.

Preferred qualifications

• 5 years of experience in program management, including developing risk management solutions and influencing technical and non technical stakeholders at all levels across an organization.
• Experience in security consulting, law enforcement, security services or military in a regional context.
• Experience working with internal and external companies/functions.
• Experience or knowledge with regional/global security operations at Google, as well as familiarity with the respective international operating environment.
• Excellent attention to detail and proficiency in risk management tools, concepts and methodologies.
• Ability to influence multiple stakeholders with SME application and experience.

About The Job

Security is at the core of Google's design and development process: it is built into the DNA of our products. The same is true of our offices. You're an expert who shares our seriousness about security and our commitment to confidentiality. You'll collaborate with our Facilities Management team to create innovative security strategies, investigate breaches and create risk assessment plans for the future. You believe that providing effective security doesn't come at the expense of customer service - you will be our bodyguard (and our long lost pal).

The Global Security Risk Assessment team (GSRA) is dedicated to safeguarding people, company facilities, critical assets/infrastructure, and intellectual property against evolving real-world threats. Rather than relying solely on routine audits, our team takes an intelligence-driven, proactive approach to physical security. We combine simulated offensive testing—evaluating how well a facility holds up against realistic and evolving tactics with comprehensive on-site inspections of physical access, alarms, guard operations, architectural design and discreet programs.

In this role, you will lead and facilitate end-to-end physical security risk assessments across global and regional sites. You will collaborate closely with analysts to identify plausible threats, partner with physical testing teams to uncover site vulnerabilities, and work alongside local facility and security managers to evaluate controls. Beyond identifying gaps, you will translate complex technical findings into clear risk insights for leadership, facilitate stakeholder workshops to develop practical mitigation strategies, and help integrate lessons learned into overarching global security standards and building guidelines.

Responsibilities

• Coordinate with wider GSRS teams and physical Red Teams to plan and execute threat based global and regional physical security risk assessments and vulnerability assessments following GSRS risk methodology.
• Conduct, lead, support, and facilitate the production of threat led global and regional physical security risk assessments on behalf of GSRS.
• Communicate complex risk information and compliance requirements clearly and concisely to technical and non technical stakeholders, leading and facilitating collaborative stakeholder risk workshops.
• Partner closely with risk category owners to develop suggested risk treatment strategies, collaborating with regional remediation teams to monitor the effectiveness of deployed controls.
• Contribute to the development and enhancement of physical risk management policies, procedures, and operational security standards to meet regulatory standards, acting as an SME on emerging physical security threats, best practices, evolving mitigation strategies, and localized regulations.

Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.