Job Description
Having millions of user base, Grab is a leading charter for ride hailing embedded with other offerings like pay, food etc across south east Asian countries.
Hence, big data is a core aspect for Grab’s future, and it requires to transfer chunk of data sets regionally for various engagements.
Saying this, Data governance\security is the overall management of the availability, usability, integrity and security of data used in an Grab regionally. A sound data governance program includes a governing data council\body, a defined set of procedures and a plan to execute those procedures.
Grab Infosec team is looking for an experienced Technical program manager to manage its Data governance\security program with an overall Infosec experience of around at-least minimum of 7-8 years.
Responsibilities
- Help build Data governance framework from scratch focusing on AWS cloud, and microservice based highly automated environment
- Manage Grab’s data sharing engagements with various regional government research organisations, universities, telecom companies, global banks, insurance companies etc
- Manage Grab’s data sharing\transfer engagements with various global vendors.
- Manage Grab’s data sharing\transfer engagements with various internal business assets (Transport, Pay, Food etc)
- Make sure all these engagements are technically, legally and privacy clear satisfying all regional aspects, covering south east Asian countries
- Define layered security controls for every engagement satisfying regional aspects
- Help integrate the metadata of all engagements for crisp and clear visibility
- Partner with Legal, privacy and security engineering team to make sure every engagement is embedded with defined security controls
- Provide monthly\quarterly\yearly, statistics.
Skills
- Excellent understanding of data governance framework
- Having fair understanding of layered security controls focusing on AWS type cloud environment having ecommerce type business essence.
- Having fair understanding, and extensive experience of data security concepts, with its horizontal & vertical regional business impacts.
- Granular understanding and experiences of various compliance activities specifically SOC2\PCI-DSS like for cloud based environments.
- Excellent knowledge and understanding of privacy concepts inclined towards regional south east Asian countries.
- Excellent knowledge of privacy and legal integrations, considering data sharing engagements with various south east Asian countries.
- Fair understanding of data encryption\masking\anonymisation and its application
- Ability to understand technical implementations and interact with security engineers as and when required
- Ability to get dashboard kind of projects done from interns\contractors
- Excellent communication and interpersonal skills
Qualifications
- BE\BS\MS or equivalent in Information technology\computer science
- Having CISM\CISSP\CISA certifications will be plus
- Around 7-8 years of experience
