Description
Join the Cyber Assurance – Vendor Security team at Grab to help make third-party risk reviews more consistent and scalable through hands-on vendor assessments and practical automation.
You will work with internal stakeholders to understand assessment needs and translate them into clear data, workflow, and reporting requirements.
Key responsibilities include:
- Gathering vendor engagement details, including services, data involved, access, hosting, sub-processors, and system integrations.
- Reviewing vendor questionnaires, security evidence, and relevant contract terms against Grab's security requirements and identifying gaps.
- Building, testing, and maintaining scoped automations to reduce repeat manual work.
- Supporting the mapping and integration of relevant risk data from internal sources.
- Coordinating evidence requests and follow-up actions with vendors and internal stakeholders.
Requirements:
- 1+ years of relevant experience or hands-on exposure in software development, automation, information security, or IT risk.
- Degree or equivalent practical learning in Computer Science, Information Systems, Cybersecurity, Information Technology, or a related technical discipline.
- Foundational programming or scripting skills (e.g., Python, Bash).
- Understanding of core security controls and concepts.
- Strong analytical and reporting skills.
Benefits:
- Term Life Insurance and comprehensive Medical Insurance.
- GrabFlex benefits package.
- Parental and Birthday leave.
- Love-all-Serve-all (LASA) volunteering leave.
- Confidential Grabber Assistance Programme.
- FlexWork arrangements.