About the job
Meet Our Cybersecurity Team:
At Grab, our dedicated cybersecurity team is committed to defending our organization, safeguarding our digital assets, and ensuring the seamless security of our global operations. We comprise a diverse group of specialists, each possessing unique skills in areas such as threat detection, incident response, and vulnerability management. Our mission is to protect our organization from the continuously evolving cyber threat landscape, ensuring the integrity, confidentiality, and availability of our data. We work collaboratively across departments, leveraging cutting-edge technologies and innovative strategies to stay ahead of emerging threats. Our team thrives in a dynamic and fast-paced environment that encourages continuous learning and professional growth.
Your Role:
We are seeking an innovative Head of Cyber Security to join our executive team. In this role, you will define the strategic vision for cybersecurity across our global operations. You will partner with leadership to develop robust security programs designed to not only shield our business from cyber threats and attacks but also to foster innovation and establish thought leadership in the industry. This position is based onsite at our one-north office in Singapore.
Your Key Responsibilities:
- Strategic Leadership: Develop and execute a forward-thinking cybersecurity strategy that aligns with our corporate objectives and addresses emerging threats across global operations. Lead initiatives to enhance the company's cybersecurity expertise, inspiring innovation and excellence.
- Team Management: Lead and motivate a large team of cybersecurity professionals, including Cyber Defence, Cyber Assurance, and Application Security teams, while fostering a culture of continuous improvement.
- Cross-Functional Collaboration: Act as an advisor to the Executive, Board Audit, and Risk Committee, influencing decisions across diverse departments such as Legal, Finance, Engineering, and Business Operations to ensure organizational security.
- Risk Management & Compliance (GRC): Create and implement strategies to mitigate risks and ensure compliance with regulations and industry standards, including PDPA and PCI-DSS across our operational regions.
- Incident Response: Oversee prompt and effective incident response efforts, maintaining disaster preparedness plans and conducting regular tests to strengthen security protocols.
- Cloud & Infrastructure Security: Secure cloud environments (AWS, GCP, Azure) and containerized infrastructures, applying Zero Trust architectures and securing APIs.
- Network & Application Security: Design secure network architectures and manage mobile and web application security, ensuring secure coding practices and conducting penetration testing.
- Vulnerability Management: Drive proactive vulnerability management initiatives, prioritizing remediation efforts based on risk assessment.

