Cyber Security Architect (Application/Infrastructure/Cloud)

OCBC company; Singapore; On-site; SGD 80,000 - 120,000; Full time

Benefits offered by this job

Competitive base salary

Holistic flexible benefits

Professional development opportunities

Job summary

OCBC company in Singapore is looking for a Cyber Security Architect focused on application, infrastructure, and cloud security. In this role, you will provide guidance in risk management and security architecture, working closely with engineering teams. Candidates need over 5 years of experience in security architecture, strong knowledge of secure SDLC, cloud security, and relevant certifications like CISSP or CCSP. A competitive salary and flexible benefits are offered.

Qualifications

• More than 5 years of experience in security architecture, including application and cloud security.
• Strong knowledge of Secure SDLC and DevSecOps practices.
• Experience securing cloud-native and containerized environments.

Responsibilities

• Provide security architecture guidance to application, cloud, and infrastructure initiatives.
• Identify security risks and define risk-based mitigation strategies.
• Integrate security controls into SDLC and CI/CD pipelines.

Skills

Security architecture

Application security concepts

Cloud security architecture

Identity and access management

Strong communication skills

Education

CISSP, CCSP, CSSLP, GWAPT (or equivalent)

Tools

AWS

Azure

GCP

Job description

You may choose to display a cookie banner on the external site. You must specify the message in the cookie banner and may add a link to a relevant policy. If you are unfamiliar with these requirements, please seek the advice of legal counsel.You are about to enter websites controlled or offered by third parties. OCBC hereby disclaims liability for any information, materials, products or services posted or offered at any of these third party web-sites. By creating a link to these third party web-sites, OCBC does not endorse or recommend any products or services offered or information contained on those web-sites or information fed by these third parties nor is OCBC liable for any failure of products or services offered or advertised at any of these third party web-sites. OCBC Group shall in no event be liable for any damages, loss or expense including without limitation, direct, indirect, special, or consequential damage, or economic loss arising from or in connection with any use of or access to any other website linked to this website, any system, server or connection failure, error, omission, interruption, delay in transmission, or computer virus and any services, products, information, data, software or other material obtained from this website or from any other website linked to this website. Any hyperlinks to any other websites are not an endorsement or verification of such websites and such websites should only be accessed at the user’s own risks. This exclusion clause shall take effect to the fullest extent permitted by law.You further consent to Oversea-Chinese Banking Corporation Limited, its related corporations (collectively, the "OCBC Group"), and their respective business partners and agents (collectively, the “OCBC Representatives”) collecting, using and disclosing your personal data for purposes reasonably required by the OCBC Group and the OCBC Representatives to enable them to process your employment application and assess your suitability for the position which you are applying for. Such purposes are set out in a Data Protection Policy, which is accessible at www.ocbc.com/policies or available on request and which you confirm you have read and understood.Cyber Security Architect (Application/Infrastructure/Cloud) page is loaded## Cyber Security Architect (Application/Infrastructure/Cloud)remote type: Onsitelocations: OCBC Singaporetime type: Full timeposted on: Posted Todayjob requisition id: JR00007402# **WHO WE ARE:** Today, we’re on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia’s leading financial services partner for a sustainable future. We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career.Your Opportunity Starts Here.# Why Join Protecting our customers' assets and data is at the heart of everything we do at OCBC. As a Cyber Engineering - Risk professional, you'll play a critical role in safeguarding our systems and networks from cyber threats. You'll be part of a team that's shaping the future of cybersecurity in the financial industry. How you succeed To succeed in this role, you'll need to stay one step ahead of emerging threats. You'll work closely with our engineering teams to identify and mitigate risks, and develop strategies to protect our systems and data. You'll need to be proactive, collaborative, and always looking for ways to improve our cybersecurity posture. What you do* Provide security architecture guidance to application, cloud (AWS, Azure, GCP, hybrid), and infrastructure initiatives from design through implementation and delivery.* Identify security risks early in the project lifecycle and define pragmatic, risk‐based mitigation strategies.* Translate business, regulatory, and technical requirements into secure, resilient, and scalable architectures.* Define, maintain, and govern security architecture standards, blueprints, and reference architectures across application, cloud, and infrastructure domains.* Embed security‐by‐design, Zero Trust, defense‐in‐depth, and least‐privilege principles across all solutions.* Conduct threat modelling, architectural risk assessments, and secure design reviews.* Integrate security controls into SDLC and CI/CD pipelines, supporting DevSecOps maturity.* Architect and review network and infrastructure security controls, including segmentation, firewalls, IDS/IPS, and related technologies.* Support vulnerability and exposure management, including container and image scanning tools (e.g., Red Hat ACS, Aqua, Trivy).# Who you areMore than 5 years of experience in security architecture, spanning application, cloud, and/or infrastructure security (cloud‐focused profiles may be considered with 5+ years of strong hands‐on experience).Strong knowledge of:* Secure SDLC and DevSecOps practices* Application security concepts (OWASP Top 10, CWE; application threat modelling)* Cloud and infrastructure security architectures* API and microservices security patterns* Identity and access management and modern authentication protocols* Experience securing cloud‐native and containerised environments.* Strong communication, stakeholder engagement, and advisory skills, with the ability to influence across technology and business teams.* One or more of: CISSP, CCSP, CSSLP, GWAPT (or equivalent)* Cloud security certifications such as: + AWS Certified Security – Specialty + Azure Security Engineer Associate + GCP Professional Cloud Security EngineerWho we are Today, we're on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia's leading financial services partner for a sustainable future. We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career. Your Opportunity Starts Here.# # **What we offer:**Competitive base salary. A suite of holistic, flexible benefits to suit every lifestyle. Community initiatives. Industry-leading learning and professional development opportunities. Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.