# Security Compliance Strategist, Vendor Security

**Company**: Grab
**Location**: Jakarta
**Work arrangement**: onsite
**Job type**: full-time
**Category**: Security
**Industry**: Technology

**Apply**: https://jobs.smartrecruiters.com/Grab/744000155352979-security-compliance-strategist-vendor-security?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_7e37903e-e5b

## Description

Join the Cyber Assurance – Vendor Security team at Grab to help make third-party risk reviews more consistent and scalable through hands-on vendor assessments and practical automation.

You will work with internal stakeholders to understand assessment needs and translate them into clear data, workflow, and reporting requirements.

Key responsibilities include:

- Gathering vendor engagement details, including services, data involved, access, hosting, sub-processors, and system integrations.

- Reviewing vendor questionnaires, security evidence, and relevant contract terms against Grab's security requirements and identifying gaps.

- Building, testing, and maintaining scoped automations to reduce repeat manual work.

- Supporting the mapping and integration of relevant risk data from internal sources.

- Coordinating evidence requests and follow-up actions with vendors and internal stakeholders.

Requirements:

- 1+ years of relevant experience or hands-on exposure in software development, automation, information security, or IT risk.

- Degree or equivalent practical learning in Computer Science, Information Systems, Cybersecurity, Information Technology, or a related technical discipline.

- Foundational programming or scripting skills (e.g., Python, Bash).

- Understanding of core security controls and concepts.

- Strong analytical and reporting skills.

Benefits:

- Term Life Insurance and comprehensive Medical Insurance.

- GrabFlex benefits package.

- Parental and Birthday leave.

- Love-all-Serve-all (LASA) volunteering leave.

- Confidential Grabber Assistance Programme.

- FlexWork arrangements.

## Skills

### Required
- software development
- automation
- information security
- IT risk
- Python
- Bash
- security controls

### Nice to have
- vendor risk
- security assessments
- GRC platform
- API integrations
- workflow automation
- ISO/IEC 27001
- NIST
- PCI DSS

---

Source: [Apply at jobs.smartrecruiters.com](https://jobs.smartrecruiters.com/Grab/744000155352979-security-compliance-strategist-vendor-security?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)