{"id":1249440,"url":"https://alion.io/job/starhub-principal-engineer-cybersecurity-grc","title":"Principal Engineer, Cybersecurity GRC","company":{"id":49913,"name":"StarHub","domain":"starhub.com","url":"https://alion.io/company/starhub","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":54000,"max_usd":126000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":17},"experience_years_min":1,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"NIST CSF","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-09-05T16:00:00Z","employer_posted_date":"2026-09-05","last_verified_at":"2026-10-25T05:53:11Z","board_verified":true,"closed_at":null,"days_open":49,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":49},"description":"Job Description\nJob Description\n As a Principal Engineer (GRC), you will execute and own day-to-day cybersecurity governance, risk and compliance activities across StarHub’s business units. You will ensure our digital assets and projects comply with internal security policies and Singapore telco regulatory obligations (e.g., IMDA, CSA, TCS, BCS, CCoPv2) while uplifting our detection and response capabilities. You will collaborate with internal teams, our MSSP, and external consultants to deliver security reviews, exercises, and remediation on time and to a high standard.\nKey Responsibilities:\n1) Regulatory Compliance & Governance (Execution)Maintain Cybersecurity Management (CSM) documentation and contribute to 5G policy development to align with regulatory obligations and deadlines.Plan and execute-together with appointed consultants and internal stakeholders-the following annual/biennial activities, including drafting and socialising reports and tracking remediation to closure:Bi-Annual Host Configuration Reviews for CII and CII-supporting assetsAnnual Table-Top Exercises (TTX) across major stakeholdersBiennial external audits with auditors and key business unitsMaintain audit-ready artefacts and ensure submissions meet expected timelines and quality.\n2) Security Engineering & OperationsPartner with the MSSP and platform owners to ensure comprehensive 24×7 log ingestion and monitoring coverage; onboard new log sources and use cases.Tune SIEM/SOAR detections and playbooks; develop runbooks to reduce mean time to detect/respond.Track and drive vulnerability remediation for assigned systems; ensure adherence to SLA (e.g., critical within 14 days) and report status to stakeholders.Support incident response (IR): triage, containment coordination, evidence preservation, and post-incident reviews; facilitate lessons learned and control improvements.Develop or enhance automation (e.g., scripts/dashboards) for evidence collection, risk tracking, and compliance reporting.\n3) Risk Management & AssurancePerform risk assessments and threat modelling for new/changed business solutions; define security requirements and validate they are tested before go-live.Maintain accurate risk register entries for owned domains; ensure risks have clear owners, treatments, and review cadences.Evaluate new security solutions/approaches and contribute to policies, standards, and guidelines.\nQualifications\nQualifications\nRequirements:\nBachelor’s degree in Computer Science, Computer Engineering, Information Technology, or related field.5-8 years’ hands-on experience in cybersecurity engineering and/or GRC within a telco or similarly regulated environment.\nFamiliarity with Singapore regulatory landscape (IMDA, CSA, CII requirements) and enterprise frameworks (e.g., NIST CSF, ISO/IEC 27001).\nDemonstrated experience in one or more of: identity & access management (RBAC, MFA, PAM), cryptographic controls, vulnerability management, firewall policy reviews, log analysis, packet/stream analysis, SIEM/SOAR tuning, and incident handling.\nStrong written and verbal communication skills; ability to prepare reports for technical and senior, non-technical stakeholders.Able to participate in on-call/after-hours support during critical cybersecurity incidents.\nPreferred Certifications (nice-to-have): GCIH, GCFA, CISA, CISSP (or equivalent).","description_format":"text","description_chars":3355,"description_truncated":false,"requirements":{"experience_years_min":1,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Broadband"],"lifecycle":[{"event":"open","at":"2026-09-25T18:15:36Z"}],"visa":[],"liveness":{"score":26,"band":"fade","label":"Fading","p_open":1,"p_active":0.727,"p_room":0.36,"age_days":49,"expected_fill_days":32,"reasons":["conf:4","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/starhub-principal-engineer-cybersecurity-grc","json_url":"https://alion.io/job/starhub-principal-engineer-cybersecurity-grc.json","meta":{"generated_at":"2026-10-25T14:15:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20412,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":49913},"rest":"https://alion.io/mcp/rest/get_company?id=49913"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstarhub-principal-engineer-cybersecurity-grc"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstarhub-principal-engineer-cybersecurity-grc"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstarhub-principal-engineer-cybersecurity-grc"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/starhub-principal-engineer-cybersecurity-grc\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstarhub-principal-engineer-cybersecurity-grc"}]}