Non-Human Identity Security Engineer (AVP/VP), CISO

OCBC Bank; Singapore; On-site; SGD 180,000 - 300,000; Full time

Benefits offered by this job

Competitive base salary.

Holistic, flexible benefits.

Community initiatives.

Industry-leading learning and career/మ

Wellbeing and growth support.

Job summary

OCBC Group in Singapore invites a security engineer specializing in non-human identities to join Group CISO. You will secure machine identities, API credentials, and AI agent access, and build dashboards to show leadership how identities are controlled across the bank.

You should have 7–10 years in security analytics or identity engineering, hands-on PKI, SSH keys, and cloud workload identities, plus experience turning security data into actionable insights.

Qualifications

• Bachelor’s degree in Computer Science, IT, Cybersecurity, Data Engineering, or related field.
• At least 7 years (AVP) or 10 years (VP) in security engineering or identity engineering.
• Hands-on experience securing non-human identities: service accounts, API keys, tokens, certificates and SSH keys.
• Knowledge of PKI, certificate lifecycle, SSH key management and cloud workload identities.
• Familiarity with OAuth/OIDC, privileged access concepts and data analysis using SQL and Python.

Responsibilities

• Build and maintain discovery and inventory of NHIs and AI agents.
• Map each NHI to an owner and track credential lifecycles and expiries.
• Manage certificate and key hygiene and renewal processes.
• Operate NHI and agent lifecycle controls on the IGA platform.
• Build dashboards for senior leadership on privileged accounts and credential rotation.
• Turn raw security data into trend analysis, anomaly detection and risk indicators.

Skills

Data analysis

Privileged access

Identity governance

PKI & certs

SSH key management

Cloud workloads identities

API security

OAuth/OIDC

SQL

Python

Dashboarding

CI/CD security

Education

Bachelor’s degree in Computer Science / IT / Cybersecurity / Data Engineering

Tools

Power BI

GitHub Secrets

AWS Secrets Manager

Azure Key Vault

Cloud KMS

Job description

WHO WE ARE:

As Singapore's longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires. Today, we're on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia's leading financial services partner for a sustainable future. We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career. Your Opportunity Starts Here.

Why Join

Protecting our customers’ assets and data is central to everything we do at OCBC. As part of Group CISO, you will help secure how machine, privileged and AI agent identities are controlled across the Group, and contribute to how the bank approach’s identity security for agentic AI.

How you succeed

We are looking for a non-human identity (NHI) security engineer with strong data analysis skills and a privileged access background to join Group CISO. You will secure and govern the Group’s non-human identities, and you will use telemetry and dashboards to show senior leadership how well privileged and non-human identities are controlled across the Group. You will also build towards securing agentic AI. The role is weighted as follows: NHI and agentic AI security (60%): discovering, governing and monitoring machine and AI agent identities, operating within the direction set by enterprise identity architecture. NHI lifecycle management is the established foundation of this part of the role. Agentic AI security is a capability the role will build towards as the Group’s AI platforms mature. Security data analysis (40%): turning privileged access and identity telemetry into reliable insight for decision-making and using it to drive remediation.

What you do

NHI Lifecycle and Identity Governance Discovery and inventory: Build and maintain discovery and inventory of NHIs, including service accounts, API credentials, workload identities (managed identities and service principals) and AI agents, and identify shadow or unowned identities. Ownership and lifecycle: Map each NHI to an accountable human owner, and track the lifecycle of credentials, tokens, certificates and SSH keys (issuance, rotation, expiry and revocation), including secrets held in vaults, cloud secrets managers and CI/CD pipelines. Certificate and key hygiene: Use PKI and certificate lifecycle data and SSH key inventories to find expiring, unmanaged or weak credentials and drive their renewal or retirement. Identity governance operations: Operate NHI and agent lifecycle controls on the Group’s identity governance and administration (IGA) platform, under the standards and direction of enterprise identity architecture. This role implements and operates; enterprise standards are set by enterprise identity architecture, with VP-level input. Security Data Analysis Dashboards for senior leadership: Build and run dashboards covering privileged account coverage, credential rotation compliance, non-compliant accounts, account lifecycle and NHI owner coverage. Define the metrics with stakeholders and keep their meaning consistent over time. Analytics and insight: Turn raw security and identity data into trend analysis, anomaly detection and risk indicators that help leaders prioritise action.

Who you are

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Data Engineering or a related field, or equivalent practical experience. At least 7 years (AVP) or 10 years (VP) of experience in security engineering, identity engineering, privileged access management or security analytics, preferably in banking or financial services. This includes at least 3 years (AVP) or 5 years (VP) of hands-on experience in non-human identity, machine identity, secrets management or privileged access. Hands-on experience securing non-human identities: discovering and inventorying service accounts, API keys, tokens, certificates and SSH keys, mapping them to accountable owners, and managing credential lifecycle, rotation and expiry. Working knowledge of PKI and certificate lifecycle management, SSH key management, and workload identities such as managed identities and service principals on cloud platforms. Working knowledge of API and token security with OAuth/OIDC or similar standards. Sound understanding of privileged access concepts: account lifecycle, credential vaulting and rotation, least privilege, just-in-time access and session monitoring. Hands-on skills in data analysis and modelling, SQL and Python, pipeline automation and dashboard construction. Ability to explain technical risk and data findings clearly to senior non-technical stakeholders.

Preferred experience

Familiarity with agentic AI identity risks, such as agent credentials, tool access, delegated authority and privilege drift, or a clear interest in developing this expertise. Hands-on experience with IDIRA Enterprise Password Vault and Secrets Manager. Experience with cloud-native secrets management and CI/CD pipeline security tooling, such as GitHub Secrets, AWS Secrets Manager, Azure Key Vault and cloud KMS, for machine identity and token lifecycle in automated engineering pipelines. Experience building dashboards on a platform (e.g., Power BI), with log analytics tools. Familiarity with cloud and AI identity platforms such as AWS Bedrock and Microsoft Copilot Studio. Relevant certifications, for example CISSP, CCSP, or cloud security, identity or data credentials. Certifications are valued but not mandatory.

What we offer

• Competitive base salary.
• A suite of holistic, flexible benefits to suit every lifestyle.
• Community initiatives.
• Industry-leading learning and professional development opportunities.
• Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.

Who we are

As Singapore's longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires. Today, we're on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia's leading financial services partner for a sustainable future. We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career. Your Opportunity Starts Here.

As the longest established Singapore bank, formed in 1932 from the merger of three local banks, we have grown from strength to strength to become a regional financial services group. With a deep history in Asia, we offer the most comprehensive coverage across ASEAN and Greater China, complemented with a presence in the leading economies of New York, London and Sydney. We are the second largest financial services group in Southeast Asia by assets with one of the world’s highest credit rating (Aa1 by Moody’s and AA- by both Fitch and S&P). We offer private banking services through our wholly-owned subsidiary, Bank of Singapore, which operates on a unique open-architecture product platform to source for the best-in-class products to meet its clients’ goals. Our insurance subsidiary, Great Eastern Holdings, is the oldest and most established life insurance group in Singapore and Malaysia.