Head of Cybersecurity

The Critical Tasks You Will Perform:

• Strategic Leadership: Define and implement a forward-thinking cybersecurity strategy that aligns with our goals and addresses evolving threats across our global operations. Lead efforts to advance the company's expertise in cybersecurity, setting a vision that inspires innovation and excellence.
• Team Management: Lead and inspire a large team of security professionals, including Cyber Defence, Cyber Assurance, and Application Security teams, promoting continuous improvement.
• Cross-Functional Collaboration: Serve as an advisor to the Executive, Board Audit, and Risk Committee, influencing decisions across departments such as Legal, Finance, Engineering, and Business Operations to ensure ecosystem security.
• Risk Management & Compliance (GRC): Develop and implement strategies to mitigate risks, ensuring compliance with regulations and industry standards such as PDPA, and PCI-DSS across regions we operate in.
• Incident Response: Oversee rapid and effective incident response efforts, maintaining disaster preparedness plans and conducting regular tests to enhance security processes.
• Cloud & Infrastructure Security: Secure cloud platforms (AWS, GCP, Azure) and containerized environments, implementing Zero Trust architectures and securing APIs.
• Network & Application Security: Design secure network architectures and oversee mobile and web application security, including secure coding practices and penetration testing.
• DevSecOps & Automation: Integrate security into CI/CD pipelines, using automation tools (SIEM, SOAR) to enhance threat detection and response.
• Threat Intelligence & Cyber Defence: Manage threat modelling, digital forensics, and run blue team/red team exercises.
• Penetration Testing & Application Security: Oversee comprehensive penetration testing efforts to identify and remediate vulnerabilities, ensuring robust application security.
• Emerging Technologies & Innovation: Lead the charge in leveraging AI/ML and advanced analytics in the area of cybersecurity. Drive thought leadership in adopting cutting-edge technologies, ensuring Grab remains at the forefront of cybersecurity innovation. Implement latest technologies that promote our security capabilities.

What Essential Skills You Will Need:

• At least 15 years in risk management, cyber security, and technology, with 5+ years in senior leadership that demonstrate strategic vision and thought leadership.
• Proven track record of building and leading inclusive security organisations, with a focus on driving innovation and influencing industry standards.
• Expertise in cloud, network, and application security.
• Experience with risk assessment methodologies and experience implementing enterprise-wide risk management programmes, including cyber security policy, risk and control management, vendor security and employee awareness.
• Knowledge of cybersecurity regulations and standards relevant to the tech industry.
• Ability to convey complex security issues to diverse audiences.

Life at Grab

We care about your well-being at Grab, here are some of the global benefits we offer:

• We have your back with Term Life Insurance and comprehensive Medical Insurance.
• With GrabFlex, create a benefits package that suits your needs and aspirations.
• Celebrate moments that matter in life with loved ones through Parental and Birthday leave, and give back to your communities through Love-all-Serve-all (LASA) volunteering leave
• We have a confidential Grabber Assistance Programme to guide and uplift you and your loved ones through life's challenges.

What we stand for at Grab

We are committed to building an inclusive and equitable workplace that enables diverse Grabbers to grow and perform at their best. As an equal opportunity employer, we consider all candidates fairly and equally regardless of nationality, ethnicity, religion, age, gender identity, sexual orientation, family commitments, physical and mental impairments or disabilities, and other attributes that make them unique.