Senior Security Compliance Strategist, Training & Awareness

Job Description :

Get to know our Team:

The information security team at Grab is passionate about solving every security challenge to build the team’s capabilities to enhance Grab’s growth. These security challenges lie in areas from internal and external cybersecurity to data privacy, we work to ensure quality, bug free code. We design programs to catch threats and remove them - to help Grab build for scale. We are here to help every single driver and passenger stay safe.

The day-to-day activities:

Working with CISO and Cyber Assurance leadership team to establish a clear and consistently executed cybersecurity awareness content and communications strategy

Developing, managing and implementing a positive security awareness program, which focuses on changing Grabbers’ behaviors

Ensuring that the cybersecurity awareness program communicates the security policies and requirements

Developing and maintaining cybersecurity awareness materials

Ensuring cybersecurity awareness information is updated on a regular basis and reflects the latest security trends and threats

Evaluating the effectiveness of existing cybersecurity training, education, and awareness programs /activities and consistently improving upon communication performance metrics.

Incorporating cybersecurity awareness into classroom and virtual learning, including new hire orientation, new manager training, and other events

Establishing a cybersecurity awareness network with key stakeholders throughout the organization to understand risks and business objectives

Managing relationships with cybersecurity education and awareness related vendors

Will be responsible for the execution and operation of the phishing assessment program

Will be responsible for the planning, execution and operation of strategy Cyber Assurance projects or campaigns

Supporting communication needs of the Cyber Assurance and CISO as needed


The must haves:

Degree in Computer Science or a technology-related / communication-related field

Ability to form complex ‘communications / messages’ in a simple, clear and concise manner to the various communities within our organization. This can include different cultures, nationalities, international locations and languages.

Excellent communication and presentation skills

Excellent stakeholder management skills

Ability to educate a non-technical audience about various security measures

Professional information security certification such as CISSP/CISM/CISA/CRISC/ISO 27001 (optional)

Read Less