Security Compliance Strategist, Vendor Security

Get to Know the Team

Join the Cyber Assurance – Vendor Security team to help make third-party risk reviews more consistent and scalable through hands-on vendor assessments and practical automation across intake, evidence tracking, and reporting. Partnering with key stakeholders across Procurement, Legal, Privacy, Risk, Compliance, Finance, and Cybersecurity, you will apply a solid foundation in information security and Third-Party Risk Management (TPRM) frameworks to elevate our vendor security posture.

Get to Know the Role

Join a team that prioritizes engineering over administrative overhead. With a clear architectural vision and established stakeholder relationships, this role is dedicated to building the engine: combining practical software engineering with security risk practices to build tools and workflows that standardize vendor assessments. This is an onsite role based in Jakarta. You will be reporting to the Principal Cyber Security Specialist, Cyber & Tech Regulatory Partnership.

The Critical Tasks You Will Perform

• Work with internal stakeholders to understand assessment needs and translate them into clear data, workflow, and reporting requirements.
• Gather vendor engagement details, including services, data involved, access, hosting, sub-processors, and system integrations.
• Review vendor questionnaires, security evidence, and relevant contract terms against Grab's security requirements and identify gaps and prepare evidence based findings.
• Build, test, and maintain scoped automations that reduce repeat manual work, such as data validation, evidence tracking, and assessment reporting.
• Support the mapping and integration of relevant risk data from internal sources, documenting data quality, access, and workflow assumptions.
• Support reviews of AI vendors, including data privacy, model security under the guidance of experienced reviewers.
• Coordinate evidence requests and follow-up actions with vendors and internal stakeholders; maintain review records and surface recurring issues or improvement opportunities.