IAM Enterprise Architect (India, Malaysia)

Standard Chartered; Kuala Lumpur; On-site; MYR 300,000 - 540,000; Full time

Benefits offered by this job

Competitive pay and benefits

Flexible working options

Professional development

Job summary

Standard Chartered is seeking an IAM Enterprise Architect to lead strategy and delivery for identity management across AI workloads. You will shape access controls, integrate with AI training and inference environments, and ensure compliance with regulatory standards.

You will partner with engineering, risk, and compliance teams to translate business needs into secure, scalable IAM solutions and to drive risk-managed outcomes in a complex financial technology environment.

Qualifications

• 15+ years IT experience with at least 5 years on AI solutions and IAM.
• Deep knowledge of identity protocols (OAuth2, OIDC, SAML) for humans and agents.
• Hands-on with Zero Trust, IAM design for AI, and AGI risks.

Responsibilities

• Define architectural vision and control frameworks for IAM in AI systems.
• Lead identity access controls, risk management, and regulatory alignment.
• Collaborate with engineering, product, and compliance to deliver roadmaps.

Skills

Agile Methodologies

Stakeholder Engagement

Project Management

IT Security Policies

Change Control

MS Office Suite

Education

Bachelor’s degree in Cyber Security/CS/Engineering/Banking/Business

CISSP or equivalent security certs

Threat Detection/AI security trainings

Tools

Active Directory/Entra

MITRE ATT&CK

Job description

Job Summary

• Standard Chartered’s diverse footprint across 63 of the fastest growing markets in Asia, Africa and the Middle East creates unique opportunities for passionate, motivated, and highly skilled people who want to make a difference. We are changing the way people think about banking. We are changing the way we do business – becoming the digital bank with a human touch. This is your opportunity to be part of a growth story in an industry that is reimagining how customers are getting better, faster experiences and convenience through digital technology.
• Our Information & Cyber Security (ICS) team sits within the Transformation, Technology & Operations (TTO) function and is responsible for all mission-critical and enterprise-wide areas of cybersecurity, including identity and access management, global threat intelligence, data protection, malware protection, and application and infrastructure security. These are challenges that impact our clients globally.
• Our IC…? We thrive on providing solutions to complex issues, devoting time and energy to designing and delivering new and innovative solutions, and all in an environment that demands being risk-aware, not risk-averse. IC chooses progress over perfection and aims to always participate with a constructive purpose. The team makes an impact wherever they are based, be it in our offices around the world, our Global Business Solution centres in China, India, Malaysia and Poland, or even from our home.
• Now you have an opportunity to make a meaningful impact with a diverse and passionate team of creators, innovators, and achievers. With us, you’ll learn, be inspired, and make an impact every day. The success of our work hinges on how we use the unique diversity of our people to realise the effects we seek to achieve: Always on. Always safe. Always Simple.

Job Summary

This role could be based in India or Malaysia. When you start the application process you will be presented with a drop down menu showing all countries, please ensure that you select a country where the role is based.

• Standard Chartered’s diverse footprint across 63 of the fastest growing markets in Asia, Africa and the Middle East creates unique opportunities for passionate, motivated, and highly skilled people who want to make a difference. We are changing the way people think about banking. We are changing the way we do business – becoming the digital bank with a human touch. This is your opportunity to be part of a growth story in an industry that is reimagining how customers are getting better, faster experiences and convenience through digital technology.
• Our Information & Cyber Security (ICS) team sits within the Transformation, Technology & Operations (TTO) function and is responsible for all mission-critical and enterprise-wide areas of cybersecurity, including identity and access management, global threat intelligence, data protection, malware protection, and application and infrastructure security. These are challenges that impact our clients globally.
• Our IC…? We thrive on providing solutions to complex issues, devoting time and energy to designing and delivering new and innovative solutions, and all in an environment that demands being risk-aware, not risk-averse. IC chooses progress over perfection and aims to always participate with a constructive purpose. The team makes an impact wherever they are based, be it in our offices around the world, our Global Business Solution centres in China, India, Malaysia and Poland, or even from our home.
• Now you have an opportunity to make a meaningful impact with a diverse and passionate team of creators, innovators, and achievers. With us, you’ll learn, be inspired, and make an impact every day. The success of our work hinges on how we use the unique diversity of our people to realise the effects we seek to achieve: Always on. Always safe. Always Simple.

Key Responsibilities

• We are seeking an accomplished and highly delivery driven and strategic thinking IAM Enterprise Architect with experience in securing AI identities to join our Threats, Architecture and Controls within the Identity & Access Management organization.
• The IAM Enterprise Architect will be responsible for defining the strategic vision, architectural patterns, and control frameworks for managing identities in an AI‑drive ecosystem. This includes securing the “Human-to-AI” interface, managing the identities of autonomous AI agents, and ensuring theat AI model training and inference processes adhere to Zero Trust Principles.
• The IAM Enterprise Architect will ensure the tactical and strategic plans and solutions are continuously strengthen to respond to the increasing threats and changing sophistication in attack tactics while keeping up with the growth and changes of business.
• The IAM Enterprise Architect will bridge the gap between business priorities, cybersecurity policies, and technical delivery teams to deliver next‑generation cyber defences against identity threats to protect our Customers.
• The successful candidate will provide strong technical security direction for identity access controls and capabilities for securing identities in Enterprise AI Solution, and lead and partner with engineers, architects, compliance teams, and business stakeholders to deliver against the capabilities roadmap, enhance user experience, and align with regulatory and cybersecurity standards. The role demands a strong awareness of the cyber threat landscape and understanding of cyber threat actors and their attack tactics, identity access controls, and AI technologies and capabilities. This individual will drive delivery health, ensure achievement of OKRs, and shape the future of IAM solutions, reporting directly to the Head of IAM Threats Architecture and Controls.

Strategy

• Design and Develop granular access control capabilities for Large Language Models, Vector Databases, Agentic Agents, and AI training environments,
• Architect and implement specialised solutions such as Just-in-Time access, Attribute based Access Control for AI agents, automated secret rotation, and identity‑aware gateways for AI workloads.
• Define how identity is managed throughout AI lifecycle, from data ingestion, model deployment, agent deployment to human‑to‑agent/model use case.
• Align AI‑specific identity threats with framework like MITRE ATT&CK and NIST AI Risk Management frameworks.
• Develop and define a multi‑year strategy for identity access controls and capabilities to secure AI, products vision roadmap and KPIs that aligned with the Business Goals
• Act as the expert in identity threats in AI and take ownership of the securing AI identity controls and solutions.
• Act as a liaison between business and technical teams to ensure business and technical objectives and requirements are well communicated and understood.
• Stay relevant on matters such as cyber threat landscape, emerging threats, active threat campaigns and emerging identity access control technologies.
• Create and update related IAM policies, standards, controls and solutions documents.
• Partner with the Bank Security Architects and Risk Teams to ensure alignment with Enterprise Security approach and Regulatory standards.
• Partner with the Bank Analytics and Strategy teams to translate insights into execution roadmaps.
• Enable Compliance & Audit Readiness Central audit trail for identity access controls and identity threats detection response controls to aligned with internal and regulatory requirements.
• Continuously identify opportunities for cost optimization, increase efficiency and process simplification.

Business

• Facilitate integration of business priorities and strategic objectives into delivery roadmaps.
• Translate technical requirements into business value statements for leadership stakeholders.
• Ensure that processes are optimized for transparency, accountability, user experience and continuous improvement.
• Partner with business owners to validate outcomes and benefits realization.
• Work closely with ICS and Stakeholders to ensure that requirements are in line with the bank’s strategy
• Responsible to evolve the craft towards improving automation, simplification and innovative use of latest market trends
• Engage with third‑party vendors as appropriate for the project

Processes

• Map, analyse, and optimize end‑to‑end business processes to improve efficiency, accuracy, and user experience.
• Identify automation and digital enablement opportunities (e.g., workflow, integration, self‑service).
• Partner with process owners, operations, and compliance teams to ensure business alignment.
• Successful grooming of delivery backlog facilitating planning ceremonies with clear, aligned outcomes.
• Stakeholder alignment score (measured via feedback from Product Owners & leadership).

People & Talent

• Act as the primary liaison between business, cybersecurity, and platform teams.
• Communicate product performance, risks, and roadmap to executive stakeholders and governance forums.
• Drive stakeholder alignment on adoption plans, investment needs, and decommissioning of legacy platforms.
• Create an environment of trust, open communication, and cross‑functional alignment across business, technology, and control functions.
• Collaborate closely with business units, Scrum Masters, and development teams to ensure successful sprint outcomes.
• Provide technical security direction for Identity Access Management for AI to a team of developers and engineers, in partnership with architects

Risk Management

• Establish and maintain a strong governance framework, covering delivery tracking, escalation management, and executive reporting.
• Proactively identify and manage program‑level risks, dependencies, and interlocks.
• Ensure adherence to ICS governance standards and contribute to shaping internal audit and risk processes.
• Ensures the project follows the standards with respect to risk management as applicable to their domain.
• Adheres to common practices to mitigate risk in their respective domain.

Governance

• Embed a strong compliance and regulatory‑first mindset into program delivery for IAM initiatives.
• Ensure that program decisions and outcomes align with legal, regulatory, and business conduct requirements.
• Act as a role model for integrity, ethics, and responsible delivery practices.
• Ensure all artefacts and assurance deliverables are as per the required standards and policies (e.g., SCB Governance Standards, ESDLC etc.).

Regulatory & Business Conduct

• Display exemplary conduct and live by the Group’s Values and Code of Conduct.
• Take personal responsibility for embedding the highest standards of ethics, including regulatory and business conduct, across Standard Chartered Bank. This includes understanding and ensuring compliance with, in letter and spirit, all applicable laws, regulations, guidelines and the Group Code of Conduct.
• Effectively and collaboratively identify, elevate, mitigate and resolve risk, conduct and compliance matters.

Key stakeholders

See The Consolidated List Of Responsibilities Below

• Peers in IAM Threats Architecture and Controls, Hive Tech Leads, PMs and SMs ICs wide, Engineering Leads & Enterprise Security Architecture
• ICS IAM Leadership Team, CSIs, CSIs Delivery Team partners, CPOs
• Technology & Architecture & CIOs
• Global Head, ICs Identity & Access Management
• Global Head, Cyber Security Technology
• Global Head, Cyber Security Operations
• Global Technology Service Heads (Production Support, Infrastructure, Testing, SRE, Architecture)

Other Responsibilities

Embed Here for good and Group’s brand and values in ICs – Identity & Access Management domain. Perform other responsibilities assigned under Group, Country, Business or Functional policies and procedures; Multiple functions (double hats).

The Ideal Candidate Will Embody The Following Attributes

• Strategic Thinker - connects execution with long‑term organizational goals.
• Independent Driver - able to lead without heavy oversight.
• Regulatory Mindset - embeds compliance and governance discipline in delivery.
• Trusted Partner - strong communicator with ability to engage stakeholders up to CIO level.
• Delivery‑Oriented - relentless focus on achieving OKRs and outcomes.
• Collaborative Leader - fosters alignment, removes silos, and builds trust across teams.

Skills And Experience

• Agile Methodologies
• Stakeholder Engagement/Management
• Project and Programme Management
• Agile Project Management
• IT Standards, Procedures & Policies
• Change Control
• Information Technology (IT) Security Policies
• Software Product Business Knowledge
• MS Office Suite Skills including SharePoint and Confluence

Qualifications

• 15+ years of total experience as IT professional with at least 5 years in working on AI solutions and 5 years in designing and implementing Identity Access Management Solutions.
• In‑depth knowledge of identity protocols such as Oauth2, OIDC, SAML, specifically how they are extended to support non‑human identity such as Agent Identity.
• In‑depth knowledge of management of Agentic Identity such as how to assign, verify, and revoke permissions for autonomous agents.
• Deep expertise in Zero Trust Architecture and hands on experience in implementing these for AI solutions.
• Implementation experience in designs using Attribute‑Based Access Control and Policy as Code.
• Familiar with the MITRE ATT&CK and DEFEND Framework and hands on experience in using these framework to design and implement IAM and AI solutions.
• Familiar with enterprise directories and identity platforms such as Active Directory, Entra and related IAM technologies
• Familiar with emerging technologies such as Artificial Intelligences, Agentic AI and Digital Assets from identity threats perspective
• Analytical, delivery‑oriented mindset with the ability to balance strategy and execution.
• Exceptional communication, collaboration, and leadership skills with a focus on influencing without authority.
• Skilled at identifying risks, driving remediation, and ensuring compliance with audit/regulatory expectations.
• Proficient in creating process and solution design documents
• Proficient in stakeholder management and good communication skills. Able to bridge business and technical teams. Able to communicate with senior executives while maintaining alignment with ground‑level teams.
• Experience working in banking, finance, or other regulated environments.

Education

• Bachelor’s degree in Cyber Security, Computer Science, Engineering, Banking, Business, or a related field
• Relevant Professional Certification – CISSP Certified NIST AI RMF Architect, AAISM, CIAM
• Relevant Threat Detection Response and IAM Technologies trainings such as Microsoft Defender, CrowdStrike, Palo Alto Cortex, CyberArk, BeyondTrust, EntraID, Okta, SailPoint

About Standard Chartered

We're a global bank connecting clients to our differentiated network, offering growth opportunities in the world's most dynamic markets. Our strategy, which combines cross‑border capabilities and leading wealth management expertise, helps us deliver our purpose – to drive commerce and prosperity through our unique diversity.

Over our 170‑year history, and across a unique geographical footprint connecting Asia, Africa and the Middle East to each other and the world, we've built a bank like no other, with diverse capabilities and partnerships that set us apart.

What We Offer

• Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions, and geographies.
• In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.
• Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
• Time‑off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
• Flexible working options based around home and office locations, with flexible working patterns.
• Proactive wellbeing support through Unmind, a market‑leading digital wellbeing platform, development courses for resilience and other human skills, global employee assistance programme, sick leave, mental health first‑aiders and self‑help toolkits.
• A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual, and digital learning.

Visit our careers website to learn more about us: www.sc.com/careers.