Head of Cyber Security

About Grab and Our Workplace

Grab is Southeast Asia's leading superapp. From getting your favourite meals delivered to helping you manage your finances and getting around town hassle-free, we've got your back with everything. In Grab, purpose gives us joy and habits build excellence, while harnessing the power of Technology and AI to deliver the mission of driving Southeast Asia forward by economically empowering everyone, with heart, hunger, honour, and humility.

Get To Know The Team

At Grab, our cybersecurity team stands to provide defence, safeguard our digital assets, and ensure the security of our global operations. We are a diverse group of experts, each with specialised skills in areas such as threat detection, incident response, and vulnerability management. Our mission is to protect our organisation against the ever-evolving landscape of cyber threats, maintaining the integrity, confidentiality, and availability of our data. We collaborate across departments, harnessing cutting-edge technologies and innovative strategies to stay ahead of emerging threats. Our team excels in a dynamic and fast-paced environment where continuous learning and professional development are encouraged.

Get To Know The Role

We are looking for a visionary Head of CyberSecurity to join our leadership team. You will set the strategic direction for cybersecurity across our global operations. You will collaborate with leadership to create comprehensive security programmes that not only protect our business from security threats and cyber-attacks, but also promote innovation and thought leadership within the industry. You will be based onsite in the Singapore's one-north office.

The Critical Tasks You Will Perform

• Strategic Leadership: Define and implement a forward-thinking cybersecurity strategy that aligns with our goals and addresses evolving threats across our global operations. Lead efforts to advance the company's expertise in cybersecurity, setting a vision that inspires innovation and excellence.
• Team Management: Lead and inspire a large team of security professionals, including Cyber Defence, Cyber Assurance, and Application Security teams, promoting continuous improvement.
• Cross-Functional Collaboration: Serve as an advisor to the Executive, Board Audit, and Risk Committee, influencing decisions across departments such as Legal, Finance, Engineering, and Business Operations to ensure ecosystem security.
• Risk Management & Compliance (GRC): Develop and implement strategies to mitigate risks, ensuring compliance with regulations and industry standards such as PDPA, and PCI-DSS across regions we operate in.
• Incident Response: Oversee rapid and effective incident response efforts, maintaining disaster preparedness plans and conducting regular tests to enhance security processes.
• Cloud & Infrastructure Security: Secure cloud platforms (AWS, GCP, Azure) and containerized environments, implementing Zero Trust architectures and securing APIs.
• Network & Application Security: Design secure network architectures and oversee mobile and web application security, including secure coding practices and penetration testing.
• DevSecOps & Automation: Integrate security into CI/CD pipelines, using automation tools (SIEM, SOAR) to enhance threat detection and response.
• Threat Intelligence & Cyber Defence: Manage threat modelling, digital forensics, and run blue team/red team exercises.
• Penetration Testing & Application Security: Oversee comprehensive penetration testing efforts to identify and remediate vulnerabilities, ensuring robust application security.
• Emerging Technologies & Innovation: Lead the charge in leveraging AI/ML and advanced analytics in the area of cybersecurity. Drive thought leadership in adopting cutting-edge technologies, ensuring Grab remains at the forefront of cybersecurity innovation. Implement latest technologies that promote our security capabilities.

Qualifications

What Essential Skills You Will Need:

• At least 15 years in risk management, cyber security, and technology, with 5+ years in senior leadership that demonstrate strategic vision and thought leadership.
• Proven track record of building and leading inclusive security organisations, with a focus on driving innovation and influencing industry standards.
• Expertise in cloud, network, and application security.
• Experience with risk assessment methodologies and experience implementing enterprise-wide risk management programmes, including cyber security policy, risk and control management, vendor security and employee awareness.
• Knowledge of cybersecurity regulations and standards relevant to the tech industry.
• Ability to convey complex security issues to diverse audiences.

Additional Information

Life at Grab

We care about your well-being at Grab, here are some of the global benefits we offer:

• We have your back with Term Life Insurance and comprehensive Medical Insurance.
• With GrabFlex, create a benefits package that suits your needs and aspirations.
• Celebrate moments that matter in life with loved ones through Parental and Birthday leave, and give back to your communities through Love-all-Serve-all (LASA) volunteering leave
• We have a confidential Grabber Assistance Programme to guide and uplift you and your loved ones through life's challenges.

What We Stand For At Grab

We are committed to building an inclusive and equitable workplace that enables diverse Grabbers to grow and perform at their best. As an equal opportunity employer, we consider all candidates fairly and equally regardless of nationality, ethnicity, religion, age, gender identity, sexual orientation, family commitments, physical and mental impairments or disabilities, and other attributes that make them unique.

Key skills/competency

• Head of Cyber Security
• Cybersecurity Strategy
• Risk Management
• Compliance
• Incident Response
• Cloud Security
• Network Security
• Application Security
• DevSecOps
• Threat Intelligence