Manager, Identity Access Management

OCBC Bank (Hong Kong) Limited; Hong Kong; On-site; HKD 780,000 - 1,100,000; Full time

Benefits offered by this job

Competitive salary

Flexible benefits

Community initiatives

Professional development

Job summary

OCBC Bank (Hong Kong) Limited is seeking an IAM Operations professional to manage user identities and access controls across Hong Kong and Macau. You will drive automation of provisioning, recertification and legacy systems administration while ensuring regulatory compliance.

The role requires experience in identity management, scripting and automation, and familiarity with security principles such as RBAC and Zero Trust.

Qualifications

• Bachelor's degree in computer science is preferred.
• IAM experience in ID administration, preferably within financial services.
• Automation/workflow and reporting development experience is preferred.
• Hands-on programming with Python/Java; knowledge of Windows directory, Linux, Kubernetes/OpenShift, and DevOps.

Responsibilities

• Maintain day-to-day and time-bound system user access provisioning, de-provisioning, and certifications for production and non-production environments; manage privileged access onboarding/offboarding.
• Coordinate and execute periodic User Access Review exercises for locally maintained applications to ensure access appropriateness and regulatory compliance.
• Provide end-to-end account administration for Macau-specific regulatory, industry and government-connected systems with locally managed credentials.
• Investigate identity-related cybersecurity incidents and access anomalies; support audit matters and implement remediation plans.
• Identify manual processes for automation in ID management, legacy systems, and access request/re-certification workflows; integrate local IDs management into ID administration solution.
• Explore automation for other cybersecurity functions and pilot emerging security technologies and automation platforms.

Skills

Python

Java

Windows

Linux

Kubernetes

OpenShift

RBAC

Zero Trust

Identity management

DevOps

Education

Bachelor's degree in Computer Science

Tools

Windows AD

Linux

Databases

SQL

DevOps tools

Job description

WHO WE ARE:

As Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires. Today, we’re on a journey of transformation. Leveraging technology and creativity to become a future‑ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia’s leading financial services partner for a sustainable future. We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future‑ready career. Your Opportunity Starts Here.

Role Overview

This role is responsible for both Identity and Access Management (IAM) operations and security process automation, supporting the secure, compliant, and efficient management of user identities and access across Hong Kong and Macau. The position oversees end‑to‑end user lifecycle management, privileged access administration, access governance, periodic access reviews, audit support, and incident response related to identity and access controls. In addition to operational responsibilities, the role drives the transformation of IAM processes through automation by identifying and implementing opportunities to streamline access provisioning, recertification, and legacy system administration. The position also explores automation opportunities across broader cybersecurity functions, and pilots emerging security technologies to enhance operational efficiency, control effectiveness, and cyber resilience.

What you will be doing:

• Daily Operation – Maintain day‑to‑day and time‑bound systems and applications user access provisioning, de‑provisioning, certifications to production and non‑production environment; privileged access onboarding/offboarding. Act as escalation point for IAM and related processes, working with users and stakeholders as needed to resolve all issues quickly and efficiently.
• Daily Operation – Coordinate and execute periodic User Access Review exercises for locally maintained applications to ensure access appropriateness and regulatory compliance.
• Daily Operation – Provide end‑to‑end account administration for Macau‑specific regulatory, industry and government‑connected systems that require locally managed credentials.
• Daily Operation – Act as the subject matter expert for investigating and resolving identity‑related cyber security incident and access anomalies alert. Active engagement on IAM related audit matters, including management of audit response and implementation of recommended improvement plans and remediation.
• Automation – Identify manual and repetitive effort/process cases for automation in existing ID management, Legacy systems & applications access request and re‑certification process. Integrate local regulatory and government applications IDs management into ID administration solution.
• Automation – Extending automation use case identification to other cyber security functions, e.g. vulnerability management and security testing, etc. Research pilot emerging security technologies and automation platforms.

Who are we looking for:

• Education: Bachelor’s degree in computer science is preferred.
• IAM Experience: Basic experience in ID administration, preferably within the financial services sector.
• Automation Experience: workflow and reporting development is preferred.
• Technical Skills: programming language hands‑on experience in Python, Java, etc. System knowledge in Windows directory, Linux, Database, Kubernetes/Openshift, DevOps development, etc.
• Security Concepts: knowledge of Least Privilege principles, and Role‑Based Access Control (RBAC), Zero Trust architecture.
• Certifications: Preferred certifications include Certified Information Systems Auditor (CISA), Certified Identity Management Professional (CIMP), or vendor‑specific credentials.
• Communication: Possesses initiative, good interpersonal and communication skills. Self‑motivated with the ability to prioritize and manage changing priorities.

What we offer:

• Competitive base salary.
• A suite of holistic, flexible benefits to suit every lifestyle.
• Community initiatives.
• Industry‑leading learning and professional development opportunities.
• Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.

Let’s build the bank we need for the future we want. Find the best version of yourself in a friendly, supportive team. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future‑ready career. Your Opportunity Starts Here.

As the longest established Singapore bank, formed in 1932 from the merger of three local banks, we have grown from strength to strength to become a regional financial services group. With a deep history in Asia, we offer the most comprehensive coverage across ASEAN and Greater China, complemented with a presence in the leading economies of New York, London and Sydney. We are the second largest financial services group in Southeast Asia by assets with one of the world’s highest credit rating (Aa1 by Moody’s and AA- by both Fitch and S&P). We offer private banking services through our wholly‑owned subsidiary, Bank of Singapore, which operates on a unique open‑architecture product platform to source for the best‑in‑class products to meet its clients’ goals. Our insurance subsidiary, Great Eastern Holdings, is the oldest and most established life insurance group in Singapore and Malaysia.