Head of Cybersecurity

About the role

Grab is looking for a Head of Cybersecurity to join its leadership team and set the strategic direction for cybersecurity across its global operations. The role works closely with leadership to build security programmes that protect the business from threats and cyber-attacks while promoting innovation and thought leadership. It is based onsite in Grab's One-North office in Singapore.

Key responsibilities

• Define and implement a forward-looking cybersecurity strategy aligned with company goals and evolving threats, and lead the advancement of the company's cybersecurity expertise.
• Lead and inspire a large team covering Cyber Defence, Cyber Assurance and Application Security, promoting continuous improvement.
• Advise the Executive, Board Audit and Risk Committee and influence decisions across Legal, Finance, Engineering and Business Operations.
• Develop risk mitigation strategies and ensure compliance with regulations and standards such as PDPA and PCI-DSS.
• Oversee incident response, maintain disaster preparedness plans and run regular tests.
• Secure cloud platforms (AWS, GCP, Azure) and containerized environments, implementing Zero Trust architectures and securing APIs.
• Design secure network architectures and oversee mobile and web application security, including secure coding and penetration testing.
• Integrate security into CI/CD pipelines using automation tools such as SIEM and SOAR.
• Manage threat modelling, digital forensics and blue team/red team exercises.
• Lead the adoption of AI/ML and advanced analytics in cybersecurity.

Required profile

• At least 15 years in risk management, cybersecurity and technology, with 5+ years in senior leadership.
• Proven track record of building and leading inclusive security organisations and influencing industry standards.
• Knowledge of cybersecurity regulations and standards relevant to the tech industry.
• Ability to explain complex security issues to diverse audiences.

Required skills

• Cloud, network and application security
• Risk assessment methodologies and enterprise-wide risk management programmes
• Cybersecurity policy, risk and control management, vendor security and employee awareness
• Penetration testing and secure coding

What we offer

• Term life insurance and comprehensive medical insurance
• GrabFlex benefits package
• Parental and birthday leave, plus volunteering leave
• A confidential assistance programme for Grabbers and their families