Security Compliance Strategist

Grabtaxi Holdings Pte. Ltd.; Singapore; On-site; SGD 60,000 - 100,000; Full time

Job summary

Grab is seeking a cybersecurity expert to join their information security team in Singapore. The role involves leading compliance initiatives and managing cyber risk across Southeast Asia. Candidates should have experience with ISO compliance, data privacy, and advising stakeholders on cybersecurity risks.

Qualifications

• Experience in providing cyber risk and compliance advisory.
• Knowledge of ISO 27001, PCI DSS, and cybersecurity regulations is essential.
• Strong ability to engage with stakeholders and communicate risk effectively.

Responsibilities

• Provide cyber risk and compliance advisory support.
• Develop and enhance cyber risk compliance programs.
• Perform compliance assessments against cybersecurity policies.

Skills

Cyber risk management

Compliance assessment

Stakeholder advisory

ISO 27001

PCI DSS

Data privacy

Job description

Get to know our Team:

-The information security team at Grab is passionate about solving every security challenge to build the team’s capabilities to enhance Grab’s growth. These security challenges lie in areas from internal and external cybersecurity to data privacy, we work to ensure quality, bug free code. We design programs to catch threats and remove them - to help Grab build for scale. We are here to help every single driver and passenger stay safe.

Get to know the Role:

• Provide cyber risk and compliance advisory support
• Develop and enhance cyber risk and compliance methodology and program
• Support and advise stakeholders on the identification, assessment, treatment and monitoring of cybersecurity risk
• Assist in driving ISO 27001, PCI DSS Compliance Program across the Organization
• Assist in driving cyber risk compliance in line with various technology risk management guidelines across SEA such as MAS TRM, BNM RMiT.
• Perform compliance assessment to ascertain the effectiveness of information security controls baselined against cyber regulatory and information security policies requirements
• Report and track cyber risk and compliance assessments, remediation activities and Key Risk Indicator (KRI) and Key Control Indicator (KCI) which are meaningful and actionable for individuals and executive management audiences
• Take a hands-on approach and partner with team leads and managers to implement and adopt procedures and controls in accordance with information security policies