Cyber Security Architect - OCBC

OCBC (Singapore); Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

OCBC is seeking an experienced Technology Architecture professional in Singapore to design and implement secure, scalable solutions across on-prem and cloud. You will align security architecture with enterprise strategy, deliver detailed design artefacts, and lead risk assessments while collaborating with cross-functional delivery teams.

The role requires 10+ years in security architecture/engineering, hands-on experience with SIEM/SOAR, EDR/NDR, and data protection technologies, plus knowledge

Qualifications

• 10+ years in security architecture or engineering (on-prem and cloud).
• Experience with SIEM/SOAR, EDR/NDR, WAF, and data security controls.
• Identity and access controls across workforce and workloads; zero-trust patterns.

Responsibilities

• Align solution design with enterprise strategy and security posture.
• Produce reference architectures and executable guardrails/policies-as-code.
• Lead architecture risk assessments and threat modeling with clear risk narratives.
• Collaborate with delivery teams to ensure secure-by-default implementations.

Skills

Security architecture

Security engineering

SIEM/SOAR

Identity and access controls

DevSecOps

Threat modeling

CI/CD security

Education

Bachelor's degree in CS/Engineering

Tools

SIEM/SOAR

EDR/NDR

WAF

DLP

KMS/HSM

PKI

Job description

WHO WE ARE:
As Singapore's longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.

Today, we're on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia's leading financial services partner for a sustainable future.

We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career.

Your Opportunity Starts Here.

Why Join
Imagine being part of a team that shapes the future of banking technology. As a Technology Architecture professional at OCBC, you'll play a key role in designing and implementing innovative solutions that transform the way we deliver financial services. You'll have the opportunity to work on exciting projects, collaborate with talented individuals, and develop your skills in a dynamic and supportive environment.

How you succeed
To succeed in this role, you'll need to stay ahead of the curve in terms of technology trends and advancements. You'll work closely with stakeholders to understand their needs and develop architecture solutions that meet their requirements. You'll also need to collaborate with cross-functional teams to ensure seamless integration and implementation of technology solutions.

What you do

• Align Solution Design with Enterprise Strategy
  
• Ensure security architecture aligns with enterprise risk appetite, regulatory obligations, and zero-trust strategy across infrastructure and cloud.
  
• Deliver Comprehensive Solutions Design Artefacts
  
• Deliver HLD/MLD, deployment architectures, and executable blueprints for network security, endpoint/EDR, SIEM/SOAR, data protection/DLP, key management/HSM, and PAM/IGA.
  
• Define and Evolve Architecture Design Patterns
  
• Define security reference architectures and control standards mapped to frameworks (e.g., NIST, ISO 27001); codify guardrails, detection-as-code, and hardening baselines.
  
• Deep Domain Expertise with Agility
  
• Deep expertise in identity-centric security, zero trust, micro-segmentation, encryption, secrets management, vulnerability/threat management, and application of DevSecOps.
  
• Collaborate and Govern Effectively
  
• Lead architecture risk assessments and threat modeling; govern exceptions and technical debt remediation with clear risk narratives.
  
• Hands-On Engagement with Delivery Teams
  
• Embed with delivery and operations to ensure secure-by-default implementations, blue/green controls, and effective runbooks/IR playbooks.
  
• Provide Expert Guidance and Support
  
• Advise on compliance (e.g., MAS TRM/PCI-DSS/PDPA/GDPR), pen-test remediation, and security posture management; mentor teams on secure design.
  

Who you are

• 10+ years in security architecture or engineering covering on-prem and cloud.
  
• Practical experience with SIEM/SOAR, EDR/NDR, WAF, DDoS protection, data security (DLP, tokenization), KMS/HSM, and certificate/PKI.
  
• Identity and access controls across workforce and workload identities; zero-trust patterns, micro-segmentation, and ZTNA.
  
• DevSecOps, threat modeling, and security testing integration into CI/CD.
  
• Familiarity with risk and control frameworks (NIST CSF, ISO 27001) and regional regulations (e.g., MAS TRM) as applicable.
  
• Ability to produce reference architectures, standards, and executable guardrails/policies-as-code.
  
• Certifications such as CISSP, CCSP, SABSA, or CISM are advantageous.
  

What we offer:

Competitive base salary. A suite of holistic, flexible benefits to suit every lifestyle. Community initiatives. Industry-leading learning and professional development opportunities. Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.

information_technology