Director DevSecOps Engineer

STANDARD CHARTERED BANK; Singapore; Hybrid; SGD 180,000 - 280,000; Full time

Benefits offered by this job

Flexible working

Competitive salary

Learning & development

Wellbeing support

Job summary

Standard Chartered Bank is seeking a senior security leader to own DevSecOps, AI security, and digital assets security capabilities across engineering and platforms. The role supports secure adoption of AI, blockchain and supply chain security with a focus on automation and measurable delivery outcomes.

You will partner with AI Factory, ADO Platform, Security Architecture and engineering teams, driving security tooling, SBOM governance and shift-left controls across CI/CD pipelines while

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Cyber Security, Engineering or a related discipline, or equivalent relevant industry experience.
• Strong software development background with hands-on proficiency in Node.js, Java or Python, with the ability to review code and translate security requirements into practical technical solutions.
• Extensive experience in AI Security and emerging technology risk, including secure AI adoption, governance controls and model security tooling.
• Proven ability to define and operationalise security guardrails for emerging technologies, across AI Factory, AI Safety and platform teams.
• Strong hands-on experience embedding security controls into CI/CD pipelines and engineering workflows, preferably using Azure DevOps or an equivalent enterprise platform.
• Deep knowledge of secure SDLC and Application Security, including SAST, SCA/OSS, vulnerability management and remediation workflows.
• Experience designing or integrating security automation and tooling across workflows.
• Understanding of software supply chain security including SBOM and open-source governance.
• Exposure to Digital Assets or blockchain security would be advantageous.
• Excellent stakeholder management and communication skills.
• Relevant certifications such as CISSP, CSSLP, CCSP, AWS/Azure security or architecture certifications preferred.

Responsibilities

• Own and deliver security capabilities across AI Security, Digital Assets Security, DevSecOps and Application Security, ensuring alignment with roadmaps and priorities.
• Drive security tooling integration, automation and workflow improvements across engineering platforms.
• Support AI model onboarding security activities and AI governance enablement to accelerate secure AI adoption.
• Enable Digital Assets security outcomes by supporting security assurance for blockchain, smart contracts and emerging technology use cases.
• Enhance ADO/SNC-based workflows and pipeline-integrated controls to support shift-left security and vulnerability management.
• Support SBOM Manager expansion and software supply chain security governance and visibility.
• Engage senior stakeholders to manage dependencies and align on security priorities.
• Transition PoVs and pilots into sustainable operating models with clear ownership and BAU handover.
• Provide timely visibility of delivery risks and governance dependencies.

Skills

Security leadership

Stakeholder management

CI/CD security

Risk management

Education

Bachelor’s or Master’s degree in Computer Science or related discipline

Tools

Azure DevOps

SAST tools

SBOM tooling

Job description

Job Summary

This role could be based in Singapore and India. When you start the application process you will be presented with a drop down menu showing all countries, please ensure that you select a country where the role is based

• Provide senior individual contributor ownership across DevSecOps, Application Security, AI Security and Digital Assets Security capabilities, ensuring security controls are embedded into engineering, platform and emerging technology workflows.
• Drive practical security enablement across ADO/SNC workflow enhancements, security tooling integration, AI model onboarding security activities, SBOM and software supply chain security, automation and pilot-to-production transition.
• Partner with AI Factory, ADO Platform, Security Architecture, application and engineering teams to align delivery priorities, manage cross-functional dependencies and support secure, scalable adoption of AI, Digital Assets and application security capabilities across the Bank.

Key Responsibilities

Security capability ownership and delivery

• Own and deliver critical security capabilities across AI Security, Digital Assets Security, DevSecOps and Application Security, ensuring delivery is aligned to committed roadmap outcomes, OKRs and business-critical security priorities.
• Drive security tooling integration, automation and workflow improvements across engineering platforms, with a focus on reducing manual effort, improving risk visibility and strengthening secure delivery practices.

AI Security, Digital Assets and emerging technology enablement

• Support AI model onboarding security activities, AI governance enablement, MCP security controls, model security tooling integration and AI Factory engagement to help accelerate secure AI adoption.
• Enable Digital Assets security outcomes by supporting security assurance for blockchain, smart contract and emerging technology use cases, including shift-left controls and early risk detection.

DevSecOps, ADO/SNC workflows and software supply chain security

• Enhance ADO/SNC-based workflows and pipeline-integrated controls to support shift-left security, vulnerability management, issue traceability and consistent remediation across application teams.
• Support SBOM Manager expansion, software supply chain security, SCA/OSS governance and component risk visibility to improve prioritised remediation and strengthen resilience against supply chain vulnerabilities.

Stakeholder management, governance and operationalisation

• Engage senior stakeholders across AI Factory, ADO Platform, AI Safety, Security Architecture, Digital Assets, application and engineering teams to manage dependencies, unblock delivery issues and drive alignment on security priorities.
• Transition successful PoVs and pilots into sustainable operating models with clear ownership, adoption plans, evidence generation, service measures and BAU handover where applicable.
• Provide timely visibility of delivery risks, material control gaps, roadmap slippage and governance dependencies, escalating where required to protect business-critical security outcomes.

Motivations

• Energised by solving complex security problems at the intersection of engineering, automation, AI, Digital Assets and enterprise risk.
• Motivated to make security practical and consumable for delivery teams by embedding controls into existing developer, platform and governance workflows.
• Comfortable operating in a fast-moving environment with evolving technologies, senior stakeholders, cross-functional dependencies and a strong focus on measurable delivery outcomes.

Our Ideal Candidate

• 15+ years’ experience across software engineering, Application Security, DevSecOps or security engineering in large-scale enterprise environments, preferably including regulated financial services.
• Strong software development background with hands‑on proficiency in Node.js, Java or Python, with the ability to review code, understand engineering patterns and translate security requirements into practical technical solutions.
• Strong experience in AI Security and emerging technology risk, including secure AI adoption, AI model onboarding, AI governance controls, model security assessment and tooling, LLM/VLM/ML security, MCP security and AI‑enabled application risks.
• Proven ability to define and operationalise security guardrails for emerging technologies, working across AI Factory, AI Safety, Security Architecture, platform and application engineering teams.
• Strong hands‑on experience embedding security controls into CI/CD pipelines and engineering workflows, preferably using Azure DevOps or an equivalent enterprise platform.
• Deep knowledge of secure SDLC and Application Security, including SAST, SCA/OSS, secrets detection, vulnerability management, remediation workflows and secure‑by‑design practices.
• Practical experience designing or integrating security automation and tooling across developer, platform and governance workflows, focusing on control effectiveness, risk visibility and developer experience.
• Sound understanding of software supply chain security, including SBOM, component risk, open‑source governance and dependency remediation.
• Exposure to Digital Assets or blockchain security, including smart‑contract security and associated technology risks, would be advantageous.
• Proven ability to evaluate and operationalise new security capabilities, taking initiatives from proof of value or pilot through production adoption and sustainable BAU ownership.
• Excellent stakeholder management and communication skills, with the ability to operate independently, manage cross‑functional dependencies and influence senior stakeholders across security, engineering, architecture, risk and governance teams.
• Strong analytical and problem‑solving skills, with the ability to manage ambiguity, balance competing priorities and provide clear, risk‑based recommendations.
• Bachelor’s or Master’s degree in Computer Science, Cyber Security, Engineering or a related discipline, or equivalent relevant industry experience.
• Relevant certifications such as CISSP, CSSLP, CCSP, AWS/Azure security or architecture certifications are preferred but not mandatory.

Role Specific Technical Competencies

• AI Security and Emerging Technology Risk
• Software Development (Node.js, Java or Python)
• Application Security and Secure SDLC
• DevSecOps and CI/CD Security Automation
• Digital Assets and Blockchain Security
• Software Supply Chain Security and SBOM
• Security Tooling Integration and Automation
• Stakeholder Management and Delivery Governance

About Standard Chartered

We're a global bank connecting clients to our differentiated network, offering growth opportunities in the world's most dynamic markets. Our strategy, which combines cross-border capabilities and leading wealth management expertise, helps us deliver our purpose - to drive commerce and prosperity through our unique diversity.

Over our 170-year history, and across a unique geographical footprint connecting Asia, Africa and the Middle East to each other and the world, we've built a bank like no other, with diverse capabilities and partnerships that set us apart.

What we offer

• Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions, and geographies.
• In line with our Fair Pay Charter, we offer a competitive salary and benefits to support your mental, physical, financial and social wellbeing.
• Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
• Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
• Flexible working options based around home and office locations, with flexible working patterns.
• Proactive wellbeing support through Unmind, a market‑leading digital wellbeing platform, development courses for resilience and other human skills, global employee assistance programme, sick leave, mental health first‑aiders and self‑help toolkits.
• A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual, and digital learning.

Visit our careers website to learn more about us: www.sc.com/careers.

Recruitment Assessments

Some of our roles use assessments to help us understand how suitable you are for the role you've applied to. If you are invited to take an assessment, this is great news. It means your application has progressed to an important stage of our recruitment process.