Senior Cyber GRC Lead — Policy, Risk & Assurance

StarHub Ltd; Singapore; Presencial; SGD 120 000 - 180 000; Tempo integral

Resumo da oferta

StarHub Ltd is seeking a Cyber GRC leader to align cybersecurity governance with business goals, manage policies, risks, and compliance across the organization.

You will drive risk reporting, 2nd line assurance, and audit readiness, while guiding policy adoption and stakeholder engagement to strengthen StarHub's security posture.

The role requires 5+ years in information security and risk management, with experience in policy development, IT audits, and regulatory compliance.

Qualificações

• More than 5 years of experience in information/cybersecurity and risk management.
• Experience in IT/IT-Security policy development and implementation.
• Experience in driving IT-security thematic assessments and IT audits.
• Knowledge of IT-security audits and regulatory cybersecurity requirements.

Responsabilidades

• Drive end-to-end governance & policy management for information security.
• Lead cyber risk oversight and reporting to stakeholders.
• Oversee 2nd line assurance & compliance monitoring.
• Coordinate audit readiness and remediation with 1st line.
• Provide awareness and advisory on StarHub policies.
• Maintain audit findings trackers and risk registers.
• Deliver briefings and trainings on cyber risk and policy awareness.
• Engage stakeholders to ensure policy adherence.

Conhecimentos

Information security

Cyber risk management

GRC governance

Policy development

Audits / audit readiness

Stakeholder management

Descrição da oferta de emprego

StarHub Ltd is seeking a Cyber GRC leader to align cybersecurity governance with business goals, manage policies, risks, and compliance across the organization.

You will drive risk reporting, 2nd line assurance, and audit readiness, while guiding policy adoption and stakeholder engagement to strengthen StarHub's security posture.

The role requires 5+ years in information security and risk management, with experience in policy development, IT audits, and regulatory compliance.