Head of Cybersecurity

Grab; Singapore; On-site; SGD 250,000 - 420,000; Full time

Job summary

Grab, a leading technology company in Singapore, seeks an accomplished cybersecurity leader to own and drive global security strategy across cloud, networks, and applications. You will steer defense, assurance, and secure software practices, aligning risk with business goals.

The role requires executive-level communication with the board, governance on PDPA/PCI-DSS, and acceleration of incident response and resilience through modern security tooling and AI/ML initiatives.

Qualifications

• Define and implement global cybersecurity strategy aligned with business goals and threats.

Responsibilities

• Lead Cyber Defence, Cyber Assurance, and Application Security teams toward continuous improvement.
• Advise Executive, Board Audit, and Risk Committee on ecosystem security decisions.
• Drive GRC strategies ensuring PDPA, PCI-DSS, and regional regulatory compliance.
• Oversee incident response, disaster preparedness plans, and regular response testing.
• Secure AWS, GCP, Azure, containers, Zero Trust architectures, and APIs.
• Design secure networks and oversee mobile and web application security practices.
• Integrate security into CI/CD pipelines using SIEM, SOAR, and automation tools.
• Manage threat modelling, digital forensics, and blue team and red team exercises.
• Oversee penetration testing to identify vulnerabilities and strengthen application security.
• Lead AI and ML adoption for cybersecurity and industry thought leadership initiatives.

Skills

Cybersecurity leadership

Cloud security

Risk management

Regulatory compliance

Tools

SIEM

SOAR

Cloud platforms (AWS/GCP/Azure)

Job description

What you'd do:

• Define and implement global cybersecurity strategy aligned with business goals and threats.


• Lead Cyber Defence, Cyber Assurance, and Application Security teams toward continuous improvement.


• Advise Executive, Board Audit, and Risk Committee on ecosystem security decisions.


• Drive GRC strategies ensuring PDPA, PCI-DSS, and regional regulatory compliance.


• Oversee incident response, disaster preparedness plans, and regular response testing.


• Secure AWS, GCP, Azure, containers, Zero Trust architectures, and APIs.


• Design secure networks and oversee mobile and web application security practices.


• Integrate security into CI/CD pipelines using SIEM, SOAR, and automation tools.


• Manage threat modelling, digital forensics, and blue team and red team exercises.


• Oversee penetration testing to identify vulnerabilities and strengthen application security.


• Lead AI and ML adoption for cybersecurity and industry thought leadership initiatives.

What they want:

• Hold fifteen plus years in risk management, cybersecurity, and technology roles.


• Demonstrate five plus years senior leadership with strategic vision and thought leadership.


• Show proven track record building inclusive security organizations and influencing standards.


• Possess deep expertise in cloud, network, and application security domains.


• Implement enterprise risk programs covering policy, controls, vendor security, and awareness.


• Know cybersecurity regulations and standards relevant to the technology industry.


• Explain complex security issues clearly to diverse technical and non-technical audiences. Hold fifteen plus years in risk management, cybersecurity, and technology roles.


• Demonstrate five plus years senior leadership with strategic vision and thought leadership.


• Show proven track record building inclusive security organizations and influencing standards.


• Possess deep expertise in cloud, network, and application security domains.


• Implement enterprise risk programs covering policy, controls, vendor security, and awareness.


• Know cybersecurity regulations and standards relevant to the technology industry.


• Explain complex security issues clearly to diverse technical and non-technical audiences.