Cyber Security Architect (Application/Infrastructure/Cloud)

OCBC Bank; Singapore; On-site; SGD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive base salary

Holistic, flexible benefits

Learning opportunities

Community initiatives

Job summary

OCBC Bank is seeking a Cyber Security Specialist in Singapore to safeguard systems and guide security architecture across application, cloud (AWS, Azure, GCP, hybrid) and infrastructure initiatives. You will collaborate with engineering teams to identify risks, define pragmatic mitigations, and ensure secure, scalable designs.

The role requires 5+ years in security architecture with deep knowledge of Secure SDLC, cloud security, and API/microservices protection.

Qualifications

• 5+ years of experience in security architecture across apps, cloud and/or infrastructure.
• Strong knowledge of Secure SDLC, DevSecOps, and cloud security patterns.
• Experience securing cloud-native and containerised environments.

Responsibilities

• Provide security architecture guidance for application, cloud and infrastructure initiatives.
• Identify risks early and define pragmatic mitigation strategies.
• Translate requirements into secure, scalable architectures.
• Embed Zero Trust and least‑privilege across solutions.
• Integrate security controls into SDLC and CI/CD pipelines.

Skills

Security architecture

Cloud security

DevSecOps

Threat modelling

IAM

OWASP Top 10

Cloud certifications

Tools

RedHatACS

Aqua

Trivy

Job description

WHO WE ARE:

As Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires. Today, we’re on a journey of transformation. Leveraging technology and creativity to become a future‑ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia’s leading financial services partner for a sustainable future. We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future‑ready career. Your Opportunity Starts Here.

Why Join Protecting our customers' assets and data is at the heart of everything we do at OCBC.

As a Cyber Security Specialist, you'll play a critical role in safeguarding our systems and networks from cyber threats. You'll be part of a team that's shaping the future of cybersecurity in the financial industry. To succeed in this role, you'll need to stay one step ahead of emerging threats. You'll work closely with our engineering teams to identify and mitigate risks, and develop strategies to protect our systems and data. You'll need to be proactive, collaborative, and always looking for ways to improve our cybersecurity posture.

What you do

• Provide security architecture guidance to application, cloud (AWS, Azure, GCP, hybrid), and infrastructure initiatives from design through implementation and delivery.
• Identify security risks early in the project lifecycle and define pragmatic, risk‑based mitigation strategies.
• Translate business, regulatory, and technical requirements into secure, resilient, and scalable architectures.
• Define, maintain, and govern security architecture standards, blueprints, and reference architectures across application, cloud, and infrastructure domains.
• Embed security‑by‑design, Zero Trust, defense‑in‑depth, and least‑privilege principles across all solutions.
• Conduct threat modelling, architectural risk assessments, and secure design reviews.
• Integrate security controls into SDLC and CI/CD pipelines, supporting DevSecOps maturity.
• Architect and review network and infrastructure security controls, including segmentation, firewalls, IDS/IPS, and related technologies.
• Support vulnerability and exposure management, including container and image scanning tools (e.g., RedHatACS, Aqua, Trivy).

Who you are

• More than 5 years of experience in security architecture, spanning application, cloud, and/or infrastructure security (cloud‑focused profiles may be considered with 5+ years of strong hands‑on experience).
• Strong knowledge of:
  • Secure SDLC and DevSecOps practices
  • Application security concepts (OWASP Top 10, CWE; application threat modelling)
  • Cloud and infrastructure security architectures
  • API and microservices security patterns
  • Identity and access management and modern authentication protocols
  • Experience securing cloud‑native and containerised environments.
• Strong communication, stakeholder engagement, and advisory skills, with the ability to influence across technology and business teams.
• One or more of: CISSP, CCSP, CSSLP, GWAPT (or equivalent) Cloud security certifications such as: AWS Certified Security – Specialty Azure Security Engineer Associate GCP Professional Cloud Security Engineer.

What we offer:

• Competitive base salary.
• A suite of holistic, flexible benefits to suit every lifestyle.
• Community initiatives.
• Industry‑leading learning and professional development opportunities.

Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers. Let’s build the bank we need for the future we want. Find the best version of yourself in a friendly, supportive team. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future‑ready career. Your Opportunity Starts Here

As the longest established Singapore bank, formed in 1932 from the merger of three local banks, we have grown from strength to strength to become a regional financial services group. With a deep history in Asia, we offer the most comprehensive coverage across ASEAN and Greater China, complemented with a presence in the leading economies of New York, London and Sydney. We are the second largest financial services group in Southeast Asia by assets with one of the world’s highest credit rating (Aa1 by Moody’s and AA- by both Fitch and S&P). We offer private banking services through our wholly‑owned subsidiary, Bank of Singapore, which operates on a unique open‑architecture product platform to source for the best‑in‑class products to meet its clients’ goals. Our insurance subsidiary, Great Eastern Holdings, is the oldest and most established life insurance group in Singapore and Malaysia.

Who we are

As Singapore's longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires. Today, we're on a journey of transformation. Leveraging technology and creativity to become a future‑ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia's leading financial services partner for a sustainable future. We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future‑ready career. Your Opportunity Starts Here.