Cyber Security Specialist (Application/Infrastructure/Cloud)

OCBC; Singapore; On-site; SGD 90,000 - 130,000; Full time

Benefits offered by this job

Competitive base salary

Flexible benefits

Professional development opportunities

Job summary

OCBC seeks a Cyber Engineering – Risk professional in Singapore to safeguard financial systems against cyber threats. The role requires over 5 years of experience in security architecture, working closely with engineering teams. Key responsibilities include providing security architecture guidance, identifying risks, and integrating security measures into project lifecycles. OCBC offers a competitive salary and a suite of flexible benefits including professional development opportunities.

Qualifications

• More than 5 years of experience in security architecture.
• Hands-on experience with application, cloud, and infrastructure security.
• Ability to engage and influence stakeholders.

Responsibilities

• Provide security architecture guidance across projects.
• Identify and mitigate security risks throughout project lifecycles.
• Embed security principles into all solutions.

Skills

Security architecture

DevSecOps practices

Communication skills

Identity and access management

Risk mitigation strategies

Education

Relevant security certifications (CISSP, CCSP, etc.)

Tools

Cloud services (AWS, Azure, GCP)

Vulnerability scanning tools

Job description

Who We Are

As Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. We take the time to truly understand people and provide support, services, solutions, and career paths that meet their individual needs and desires. Today, we’re on a journey of transformation, leveraging technology and creativity to become a future‑ready learning organisation. Our strategic ambition is to be Asia’s leading financial services partner for a sustainable future. We invite you to build the bank of the future, innovate the way we deliver financial services, work in friendly supportive teams, build lasting value in your community, help people grow their assets, business, and investments, and enjoy a vibrant, future‑ready career.

Why Join

Protecting our customers' assets and data is at the heart of everything we do at OCBC. As a Cyber Engineering – Risk professional, you’ll play a critical role in safeguarding our systems and networks from cyber threats. You’ll be part of a team that’s shaping the future of cybersecurity in the financial industry.

How You Succeed

To succeed in this role, you’ll need to stay one step ahead of emerging threats, work closely with our engineering teams to identify and mitigate risks, and develop strategies to protect our systems and data. You’ll need to be proactive, collaborative, and always looking for ways to improve our cybersecurity posture.

What You Do

• Provide security architecture guidance to application, cloud (AWS, Azure, GCP, hybrid), and infrastructure initiatives from design through implementation and delivery.
• Identify security risks early in the project lifecycle and define pragmatic, risk‑based mitigation strategies.
• Translate business, regulatory, and technical requirements into secure, resilient, and scalable architectures.
• Define, maintain, and govern security architecture standards, blueprints, and reference architectures across application, cloud, and infrastructure domains.
• Embed security‑by‑design, Zero Trust, defense‑in‑depth, and least‑privilege principles across all solutions.
• Conduct threat modelling, architectural risk assessments, and secure design reviews.
• Integrate security controls into SDLC and CI/CD pipelines, supporting DevSecOps maturity.
• Architect and review network and infrastructure security controls, including segmentation, firewalls, IDS/IPS, and related technologies.
• Support vulnerability and exposure management, including container and image scanning tools (e.g., Red Hat ACS, Aqua, Trivy).

Who You Are

More than 5 years of experience in security architecture, spanning application, cloud, and/or infrastructure security (cloud‑focused profiles may be considered with 5+ years of strong hands‑on experience).

Strong Knowledge Of

• Secure SDLC and DevSecOps practices
• Application security concepts (OWASP Top 10, CWE; application threat modelling)
• Cloud and infrastructure security architectures
• API and microservices security patterns
• Identity and access management and modern authentication protocols
• Experience securing cloud‑native and containerised environments.
• Strong communication, stakeholder engagement, and advisory skills, with the ability to influence across technology and business teams.
• One or more of: CISSP, CCSP, CSSLP, GWAPT (or equivalent)
• Cloud security certifications such as:
  • AWS Certified Security – Specialty
  • Azure Security Engineer Associate
  • GCP Professional Cloud Security Engineer

What We Offer

Competitive base salary. A suite of holistic, flexible benefits to suit every lifestyle. Community initiatives. Industry‑leading learning and professional development opportunities. Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.