Principal Engineer, Cybersecurity GRC

About the role

The Principal Engineer (GRC) will lead day‑to‑day cybersecurity governance, risk and compliance activities across StarHub’s business units. You will ensure digital assets and projects meet internal policies and Singapore telco regulatory obligations while enhancing detection and response capabilities.

Key responsibilities

• Maintain Cybersecurity Management documentation and support 5G policy development to meet regulatory deadlines.
• Plan and execute bi‑annual host configuration reviews, annual tabletop exercises, and biennial external audits, tracking remediation to closure.
• Partner with MSSP and platform owners to ensure 24×7 log ingestion, SIEM/SOAR tuning, and incident response support.
• Drive vulnerability remediation, develop automation scripts and dashboards for evidence collection and compliance reporting.
• Perform risk assessments and threat modelling for new solutions, maintain risk register entries, and evaluate new security solutions.

Required profile

• Bachelor’s degree in Computer Science, Computer Engineering, Information Technology or related field.
• 5–8 years hands‑on experience in cybersecurity engineering and/or GRC within a telco or similarly regulated environment.
• Familiarity with Singapore regulatory landscape (IMDA, CSA, CII) and enterprise frameworks such as NIST CSF and ISO/IEC 27001.
• Proven experience in identity & access management, cryptographic controls, vulnerability management, firewall policy reviews, log and packet analysis, and SIEM/SOAR operations.

Required skills

• RBAC, MFA, PAM
• Cryptographic controls
• Vulnerability management
• Firewall policy review
• Log analysis and packet/stream analysis
• SIEM and SOAR platforms
• Scripting/automation (e.g., Python)
• Dashboard creation and risk tracking