Solution Architect (Cybersecurity)

OCBC (Singapore); Singapore; On-site; SGD 180,000 - 260,000; Full time

Benefits offered by this job

Competitive base salary

Flexible benefits

Professional development opportunities

Job summary

OCBC Bank invites an experienced Technology Architecture professional to design and implement secure banking technology architectures. You will safeguard enterprise systems, align designs with regulatory expectations, and drive secure runs across cloud and on‑prem environments.

You will lead threat modeling, deliver executable blueprints, and mentor teams on secure design, with a focus on MAS/PCI-DSS compliance and risk governance.

Qualifications

• 10+ years in security architecture or engineering with on-prem and cloud.
• Practical experience in SIEM/SOAR, EDR/NDR, WAF and data security.
• Strong knowledge of zero-trust, encryption, and threat management.

Responsibilities

• Align security design with enterprise strategy and risk tolerance.
• Deliver architecture artefacts including high/low level designs.
• Define reference architectures and guardrails with policy-as-code.
• Mentor teams on secure design and DevSecOps practices.
• Collaborate with delivery teams for secure-by-default implementations.

Skills

Security architecture

Cloud security

Zero trust

DevSecOps

Threat modeling

CI/CD security

Identity management

Security governance

Tools

SIEM/SOAR

EDR/NDR

WAF

DLP

KMS/HSM

PKI

Job description

WHO WE ARE:

As Singapore's longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires.

Today, we're on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia's leading financial services partner for a sustainable future.

We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career.

Your Opportunity Starts Here.

Why Join

Imagine being part of a team that shapes the future of banking technology. As a Technology Architecture professional at OCBC, you'll play a key role in designing and implementing innovative solutions that transform the way we deliver financial services. You'll have the opportunity to work on exciting projects, collaborate with talented individuals, and develop your skills in a dynamic and supportive environment.

How you succeed

To succeed in this role, you'll need to stay ahead of the curve in terms of technology trends and advancements. You'll work closely with stakeholders to understand their needs and develop architecture solutions that meet their requirements. You'll also need to collaborate with cross-functional teams to ensure seamless integration and implementation of technology solutions.

What you do

• Align Solution Design with Enterprise Strategy Ensure security architecture aligns with enterprise risk appetite, regulatory obligations, and zero-trust strategy across infrastructure and cloud.
• Deliver Comprehensive Solutions Design Artefacts Deliver HLD/MLD, deployment architectures, and executable blueprints for network security, endpoint/EDR, SIEM/SOAR, data protection/DLP, key management/HSM, and PAM/IGA.
• Define and Evolve Architecture Design Patterns Define security reference architectures and control standards mapped to frameworks (e.g., NIST, ISO 27001); codify guardrails, detection-as-code, and hardening baselines.
• Deep Domain Expertise with Agility Deep expertise in identity-centric security, zero trust, micro-segmentation, encryption, secrets management, vulnerability/threat management, and application of DevSecOps.
• Collaborate and Govern Effectively Lead architecture risk assessments and threat modeling; govern exceptions and technical debt remediation with clear risk narratives.
• Hands-On Engagement with Delivery Teams Embed with delivery and operations to ensure secure-by-default implementations, blue/green controls, and effective runbooks/IR playbooks.
• Provide Expert Guidance and Support Advise on compliance (e.g., MAS TRM/PCI-DSS/PDPA/GDPR), pen-test remediation, and security posture management; mentor teams on secure design.

Who you are

• 10+ years in security architecture or engineering covering on-prem and cloud.
• Practical experience with SIEM/SOAR, EDR/NDR, WAF, DDoS protection, data security (DLP, tokenization), KMS/HSM, and certificate/PKI.
• Identity and access controls across workforce and workload identities; zero-trust patterns, micro-segmentation, and ZTNA.
• DevSecOps, threat modeling, and security testing integration into CI/CD.
• Familiarity with risk and control frameworks (NIST CSF, ISO 27001) and regional regulations (e.g., MAS TRM) as applicable.
• Ability to produce reference architectures, standards, and executable guardrails/policies-as-code.
• Certifications such as CISSP, CCSP, SABSA, or CISM are advantageous.

What we offer:

Competitive base salary. A suite of holistic, flexible benefits to suit every lifestyle. Community initiatives. Industry-leading learning and professional development opportunities. Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.