ED/SVP, Enterprise Security Architect, Enterprise Architecture, Group Technology

DBS Bank Limited; Singapore; On-site; SGD 120,000 - 160,000; Full time

Job summary

A leading financial institution in Singapore is seeking a professional to form a comprehensive Enterprise Security Architectural framework. This role involves collaborating with business and IT stakeholders to implement security solutions, ensuring compliance with banking regulations, and protecting critical data from evolving threats. Ideal candidates will have extensive experience in cloud environments, cybersecurity principles, and strong analytical skills. The position demands excellent communication abilities to influence architectural decisions within the organization.

Qualifications

• Ability to simplify complex technical concepts for different audiences.
• Strong time management skills in fast-paced environments.
• Strong analytical mindset to drive effective solutions.

Responsibilities

• Serve as a trusted advisor to business and IT stakeholders.
• Collaborate to design and implement a technology security roadmap.
• Lead the execution of the technology strategy.
• Fortify enterprise security architecture.
• Define and maintain reference architectures and standards.
• Evaluate and implement security tools and services.
• Ensure alignment with regulatory updates and audit readiness.
• Oversee security reviews and architecture of financial applications.
• Embed secure development lifecycle practices.
• Promote a security-by-design culture.

Skills

Understanding business strategy & processes

Technical architecture knowledge

End-to-End architecture understanding

Cloud native environment experience

Knowledge of banking platforms

Deep knowledge of cybersecurity principles

Analytical mindset

Stakeholder management skills

Education

Certifications in TOGAF, Zachman, ITIL, CISSP, AWS, Azure, or GCP

Tools

Kafka

Kubernetes

Docker

Cloud Foundry

Job description

Business Function

Group Technology enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group Tech, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.

About The Role

Given the bank's sustained technological expansion, this role assumes a pivotal position in formulating an extensive Enterprise Security Architectural framework, strategy, and standards. This role ensures that our security frameworks, controls, and strategies comply with banking regulatory requirements and protect critical financial data and infrastructure from evolving threats.

Key Responsibilities

• Serve as a trusted advisor to business and IT stakeholders, understanding their goals and the broader business strategy to deliver security solutions that align with customer journeys and business outcomes
• Collaborate with Application and Infrastructure CTOs and CISO to design and implement a technology security roadmap that supports the bank's strategic objectives
• Lead the execution of the technology strategy, ensuring transparency on progress, milestones, and outcomes while aligning with senior management and key stakeholders
• Fortify enterprise security architecture including cloud platforms that aligns with financial regulatory requirements, business goals, and industry best practices with prioritisation against evolving threats
• Define and maintain reference architectures and technical standards across the organization's infrastructure, applications, and data environments
• Lead the evaluation and implementation of security tools, technologies, and services
• Partner with internal audit, legal, and compliance to ensure continuous alignment with regulatory updates and audit readiness
• Oversee security reviews and architecture of financial applications and third‑party services, ensuring data privacy, encryption, and strong access controls
• Embed secure development lifecycle (SDLC) practices across application and infrastructure teams
• Collaborate with business, IT, DevOps, and cybersecurity teams to promote a security‑by‑design culture

Key Requirements

• Demonstrates ability to understand business strategy & processes & its successful translation into technology solutions
• Excellent knowledge of technical architecture and modern application design patterns, including microservices, serverless functions
• Good End‑to‑End Architecture understanding, including Enterprise Java Stack, Front‑End technologies, mobile applications (Android and iOS), Middleware, Databases (SQL & No SQL), Data Lake, RESTful APIs, and streaming technology e.g. Kafka
• Experienced working in a cloud native work environment including public cloud, containers, serverless, cloud data, credential and security management such as keys, secrets, vaults, service monitoring on cloud, PaaS and container environment such as Cloud Foundry, OpenShift Docker, Kubernetes and Infra‑as‑code etc
• Strong understanding of banking platforms, payments systems, transaction systems, and regulatory constraints
• Deep knowledge of cybersecurity principles, network security, IAM, cryptography, and application security
• Strong background in Enterprise Architecture blueprints, including applications, integrations, data, and network landscapes
• Ability to formulate and execute multi‑year strategic initiatives, while implementing tactical initiatives within a broader framework
• Certifications in TOGAF, Zachman, ITIL, CISSP, AWS, Azure, or GCP, or equivalent
• Excellent communication and stakeholder management skills, with the ability to influence and drive key architectural decisions
• Ability to simplify and clearly communicate complex technical concepts, adjusting for different audiences
• Strong time management skills, with the ability to thrive in fast‑paced, dynamic environments
• Strong analytical mindset, capable of understanding complex scenarios and driving effective solutions
• A commitment to fostering innovation, best practices, sustainability, and compliance with industry standards