Lead Security Technical Program Manager

As the Lead Security Technical Program Manager at Grab, you will manage complex, cross-functional programs and lead all aspects of assigned program delivery.

You will create and maintain the delivery roadmap for the teams you work with, along with the respective Tech and Product Leaders. You will also define the way of driving these programs and find ways to improve this process in a data-driven manner.

Responsibilities:

• Technical Facilitation: Demonstrate an understanding of Application Security functions, including Secure SDLC (DevSecOps) automation, SAST/DAST/SCA vulnerability management, remediation, and early-stage threat modelling.
• Knowledge of AWS Cloud Security standards, ensuring awareness of IAM least-privilege principles, Infrastructure as Code (IaC) security scanning, and Cloud Security Posture Management (CSPM).
• Experience in API security and Gateway configurations, cloud WAF rule strategies, and core network security design principles across engineering teams.
• Lead technical whiteboard sessions to troubleshoot implementation details and remove blockers.
• Provide strategic advice and input on complex issues impacting both technical and non-technical teams.

Strategic Program Leadership:

• Drive roadmap planning and prioritization discussions with cross-functional leaders.
• Manage a portfolio of projects as an advisor and directly own the delivery of 1–2 large, cross-organizational programs.

Stakeholder Management & Communication:

• Partner with business and technical stakeholders to define program timelines and milestones.
• Report progress, resolve impediments, and ensure cross-functional alignment.
• Manage communication across teams, aligning non-technical and technical stakeholder needs.
• Manage executive-level escalations.

Continuous Improvement & Best Practices:

• Identify and implement improvements in team and organisational delivery practices.
• Improve adoption of best practices across disciplines to enhance team responsiveness and execution.

Qualifications:

• 10–12 years of experience in Technical Program Management, PMO leadership, or similar roles in tech or tech-adjacent domains.
• Experience with core AWS Security Services (such as IAM, GuardDuty, Security Hub, WAF, Inspector, and KMS).
• Solid comprehension of common application security flaws and general mitigation strategies at the code or infrastructure level.
• Familiarity with basic scripting concepts (e.g., Python, Bash) to understand automation for alert routing and security dashboards.
• Experience with APIs, API Gateways, cloud WAF rules, and basic network architecture/security concepts.
• Track record in managing complex, cross-functional portfolios and end-to-end program delivery.
• Experience in both technical and non-technical business reviews/discussions for complex projects.
• Judgement in making cross-group decisions backed by both business and technical insights.
• Define and evolve program management frameworks using a data-driven approach.
• Identify, mitigate, and manage risks throughout the project lifecycle.
• Experience collaborating with senior leadership and stakeholders to align objectives.

Benefits:

• Term Life Insurance and comprehensive Medical Insurance.
• GrabFlex to create a benefits package that suits your needs and aspirations.
• Parental and Birthday leave, and Love-all-Serve-all (LASA) volunteering leave.
• Confidential Grabber Assistance Programme.
• FlexWork arrangements such as differentiated hours.