Business Function Group Technology enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group Tech, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.
About The Role: Given the bank's sustained technological expansion, this role assumes a pivotal position in formulating an extensive Enterprise Security Architectural framework, strategy, and standards.
This role ensures that our security frameworks, controls, and strategies comply with banking regulatory requirements and protect critical financial data and infrastructure from evolving threats.
Key Responsibilities:
Serve as a trusted advisor to business and IT stakeholders, understanding their goals and the broader business strategy to deliver security solutions that align with customer journeys and business outcomes
Collaborate with Application and Infrastructure CTOs and CISO to design and implement a technology security roadmap that supports the bank's strategic objectives
Lead the execution of the technology strategy, ensuring transparency on progress, milestones, and outcomes while aligning with senior management and key stakeholders
Fortify enterprise security architecture including cloud platforms that aligns with financial regulatory requirements, business goals, and industry best practices with prioritisation against evolving threats
Define and maintain reference architectures and technical standards across the organization's infrastructure, applications, and data environments
Lead the evaluation and implementation of security tools, technologies, and services
Partner with internal audit, legal, and compliance to ensure continuous alignment with regulatory updates and audit readiness
Oversee security reviews and architecture of financial applications and third-party services, ensuring data privacy, encryption, and strong access controls
Embed secure development lifecycle (SDLC) practices across application and infrastructure teams
Collaborate with business, IT, DevOps, and cybersecurity teams to promote a securityby-design culture
Key Requirements:
Demonstrates ability to understand business strategy & processes & its successful translation into technology solutions
Excellent knowledge of technical architecture and modern application design patterns, including microservices, serverless functions
Good End-to-End Architecture understanding, including Enterprise Java Stack, Front-End technologies, mobile applications (Android and iOS), Middleware, Databases (SQL & No SQL), Data Lake, RESTful APIs, and streaming technology e.g. Kafka
Experienced working in a cloud native work environment including public cloud, containers, serverless, cloud data, credential and security management such as keys, secrets, vaults, service monitoring on cloud, PaaS and container environment such as Cloud Foundry, OpenShift Docker, Kubernetes and Infra-as-code etc
Strong understanding of banking platforms, payments systems, transaction systems, and regulatory constraints
Deep knowledge of cybersecurity principles, network security, IAM, cryptography, and application security
Strong background in Enterprise Architecture blueprints, including applications, integrations, data, and network landscapes
Ability to formulate and execute multi-year strategic initiatives, while implementing tactical initiatives within a broader framework
Certifications in TOGAF, Zachman, ITIL, CISSP, AWS, Azure, or GCP, or equivalent
Excellent communication and stakeholder management skills, with the ability to influence and drive key architectural decisions
Ability to simplify and clearly communicate complex technical concepts, adjusting for different audiences
Strong time management skills, with the ability to thrive in fast-paced, dynamic environments
Strong analytical mindset, capable of understanding complex scenarios and driving effective solutions
A commitment to fostering innovation, best practices, sustainability, and compliance with industry standards
All Job Ads are subject to GrabJobs’s Terms of Service. We allow users to flag postings that may be in violation of those terms. Job Ads may also be flagged by GrabJobs moderation team. However, no moderation system is perfect, and flagging a posting does not ensure that it will be removed.
Be the first to receive the latest Others Full-Time Jobs in Singapore.
Setup your job alert:
By activating job alerts, I agree to GrabJobs Terms & Privacy Policy. I can unsubscribe to job alerts anytime.
Skip
GrabJobs is the no1 job portal in Singapore, connecting you to thousands of jobs fast!
Find the best jobs in Singapore, apply in 1 click and get a job today!