Full-timeTech & engineering· Posted 5 Sept

Principal Engineer, Cybersecurity GRC

StarHubFrom company site

Salary

Not stated by the company

When

Full-time hours

Where

Singapore

Apply on company site

How well do you match? Check in 10 seconds →

Free with a WorkJio account: we compare your profile with this job and show what you already meet.

Share with a friend

Start: Not stated
Work mode: On-site
Experience: Experienced

About the role

This role owns day-to-day cybersecurity governance, risk and compliance work across the business units of a Singapore telco. You will work with internal teams, an MSSP and external consultants to keep digital assets and projects aligned with internal security policies and local regulatory obligations. It suits an experienced security or GRC practitioner who is comfortable running compliance activities and improving detection and response.

What you'll do

Maintain Cybersecurity Management documentation and help develop 5G policy in line with regulatory deadlines
Plan and run bi-annual host configuration reviews for CII and CII-supporting assets with consultants and stakeholders
Plan and run annual table-top exercises across major stakeholders

Know someone for this? Share it

WhatsApp Telegram Facebook LinkedIn

Plan and run biennial external audits with auditors and key business units

Draft and socialise reports and track remediation through to closure

Keep audit-ready artefacts and ensure submissions meet timelines and quality expectations

Work with the MSSP and platform owners on 24x7 log ingestion and monitoring coverage, onboarding new log sources and use cases

Tune SIEM/SOAR detections and playbooks and develop runbooks to cut mean time to detect and respond

Track and drive vulnerability remediation for assigned systems, meeting SLAs such as critical within 14 days, and report status

Support incident response including triage, containment coordination, evidence preservation and post-incident reviews

Develop automation such as scripts and dashboards for evidence collection, risk tracking and compliance reporting

Perform risk assessments and threat modelling for new or changed solutions, define security requirements and validate testing before go-live

Maintain risk register entries with clear owners, treatments and review cadences

Evaluate new security solutions and contribute to policies, standards and guidelines

Good to know

Role is based in Singapore
On-call and after-hours support may be needed during critical cybersecurity incidents

Requirements

Bachelor's degree in Computer Science, Computer Engineering, Information Technology or a related field
5–8 years of hands-on cybersecurity engineering and/or GRC experience in a telco or similarly regulated environment
Familiarity with Singapore regulatory landscape (IMDA, CSA, CII requirements) and enterprise frameworks such as NIST CSF and ISO/IEC 27001
Demonstrated experience in one or more of: identity and access management (RBAC, MFA, PAM), cryptographic controls, vulnerability management, firewall policy reviews, log analysis, packet/stream analysis, SIEM/SOAR tuning, incident handling
Strong written and verbal communication skills, able to prepare reports for technical and senior non-technical stakeholders
Able to participate in on-call/after-hours support during critical cybersecurity incidents

Apply on the company website

You will leave WorkJio. Never pay a fee or share your Singpass password, OTP or bank log-ins to apply.

Open application

Listed from StarHub’s own careers page and not yet verified by WorkJio. You apply on the company’s site. See all their roles.

Is this your company? Roles that show a salary rank higher on WorkJio. Claim or remove this listing

Principal Engineer, Cybersecurity GRC

About the role

What you'll do

Good to know

Requirements

More jobs like this

Assoc Director, Engineering Lead, WRB Tech

SABRE Developer

Research Associate (AI for Science)

Senior Associate Director / Associate Director (End point specialist)

Agentic Systems Engineer - Manufacturing

Product Manager, Transaction Platforms Programme