Solution Architect (Cybersecurity)

OCBC Bank; Singapore; On-site; SGD 180,000 - 240,000; Full time

Benefits offered by this job

Competitive base salary

Flexible benefits

Learning and development opportunities

Job summary

OCBC Bank seeks a seasoned Technology Architecture professional in Singapore to design and implement secure banking technology solutions. You will partner with stakeholders to align security with enterprise strategy across on‑prem and cloud while embedding secure practices in delivery teams.

You will apply identity-centric security, zero trust, and encryption to protect assets, data, and users. The role emphasizes governance, risk insight, and collaboration across functions.

Qualifications

• 10+ years in security architecture or engineering for on-prem and cloud.
• Experience with SIEM/SOAR, EDR/NDR, WAF, DDoS protection, and data security (DLP, tokenization).
• Identity and access controls across workforce and workload identities; zero-trust patterns, micro-segmentation, and ZTNA.
• DevSecOps, threat modeling, and security testing integration into CI/CD.

Responsibilities

• Align Solution Design with Enterprise Strategy
• Ensure security architecture aligns with enterprise risk appetite, regulatory obligations, and zero-trust strategy across infrastructure and cloud.
• Deliver Comprehensive Solutions Design Artefacts
• Deliver HLD/MLD, deployment architectures, and executable blueprints for network security, endpoint/EDR, SIEM/SOAR, data protection/DLP, key management/HSM, and PAM/IGA.
• Define and Evolve Architecture Design Patterns
• Define security reference architectures and control standards mapped to frameworks (e.g., NIST, ISO 27001); codify guardrails, detection-as-code, and hardening baselines.
• Deep Domain Expertise with Agility
• Deep expertise in identity-centric security, zero trust, micro-segmentation, encryption, secrets management, vulnerability/threat management, and application of DevSecOps.
• Collaborate and Govern Effectively
• Lead architecture risk assessments and threat modeling; govern exceptions and technical debt remediation with clear risk narratives.
• Hands-On Engagement with Delivery Teams
• Embed with delivery and operations to ensure secure-by-default implementations, blue/green controls, and effective runbooks/IR playbooks.
• Provide Expert Guidance and Support
• Advise on compliance (e.g., MAS TRM/PCI-DSS/PDPA/GDPR), pen-test remediation, and security posture management; mentor teams on secure design.

Skills

Security architecture

Identity & access control

Zero-trust

DevSecOps

Threat modeling

CI/CD security

Tools

SIEM/SOAR

EDR/NDR

WAF

DLP

KMS/HSM

Job description

WHO WE ARE:

As Singapore’s longest established bank, we have been dedicated to enabling individuals and businesses to achieve their aspirations since 1932. How? By taking the time to truly understand people. From there, we provide support, services, solutions, and career paths that meet their individual needs and desires. Today, we’re on a journey of transformation. Leveraging technology and creativity to become a future-ready learning organisation. But for all that change, our strategic ambition is consistently clear and bold, which is to be Asia’s leading financial services partner for a sustainable future. We invite you to build the bank of the future. Innovate the way we deliver financial services. Work in friendly, supportive teams. Build lasting value in your community. Help people grow their assets, business, and investments. Take your learning as far as you can. Or simply enjoy a vibrant, future-ready career. Your Opportunity Starts Here.

As the longest established Singapore bank, formed in 1932 from the merger of three local banks, we have grown from strength to strength to become a regional financial services group. With a deep history in Asia, we offer the most comprehensive coverage across ASEAN and Greater China, complemented with a presence in the leading economies of New York, London and Sydney. We are the second largest financial services group in Southeast Asia by assets with one of the world’s highest credit rating (Aa1 by Moody’s and AA- by both Fitch and S&P). We offer private banking services through our wholly-owned subsidiary, Bank of Singapore, which operates on a unique open-architecture product platform to source for the best-in-class products to meet its clients’ goals. Our insurance subsidiary, Great Eastern Holdings, is the oldest and most established life insurance group in Singapore and Malaysia.

Why Join

Imagine being part of a team that shapes the future of banking technology. As a Technology Architecture professional at OCBC, you'll play a key role in designing and implementing innovative solutions that transform the way we deliver financial services. You'll have the opportunity to work on exciting projects, collaborate with talented individuals, and develop your skills in a dynamic and supportive environment.

How you succeed

To succeed in this role, you'll need to stay ahead of the curve in terms of technology trends and advancements. You'll work closely with stakeholders to understand their needs and develop architecture solutions that meet their requirements. You'll also need to collaborate with cross-functional teams to ensure seamless integration and implementation of technology solutions.

What you do

• Align Solution Design with Enterprise Strategy
• Ensure security architecture aligns with enterprise risk appetite, regulatory obligations, and zero-trust strategy across infrastructure and cloud.
• Deliver Comprehensive Solutions Design Artefacts
• Deliver HLD/MLD, deployment architectures, and executable blueprints for network security, endpoint/EDR, SIEM/SOAR, data protection/DLP, key management/HSM, and PAM/IGA.
• Define and Evolve Architecture Design Patterns
• Define security reference architectures and control standards mapped to frameworks (e.g., NIST, ISO 27001); codify guardrails, detection-as-code, and hardening baselines.
• Deep Domain Expertise with Agility
• Deep expertise in identity-centric security, zero trust, micro-segmentation, encryption, secrets management, vulnerability/threat management, and application of DevSecOps.
• Collaborate and Govern Effectively
• Lead architecture risk assessments and threat modeling; govern exceptions and technical debt remediation with clear risk narratives.
• Hands-On Engagement with Delivery Teams
• Embed with delivery and operations to ensure secure-by-default implementations, blue/green controls, and effective runbooks/IR playbooks.
• Provide Expert Guidance and Support
• Advise on compliance (e.g., MAS TRM/PCI-DSS/PDPA/GDPR), pen-test remediation, and security posture management; mentor teams on secure design.

Who you are

• 10+ years in security architecture or engineering covering on-prem and cloud.
• Practical experience with SIEM/SOAR, EDR/NDR, WAF, DDoS protection, data security (DLP, tokenization), KMS/HSM, and certificate/PKI.
• Identity and access controls across workforce and workload identities; zero-trust patterns, micro-segmentation, and ZTNA.
• DevSecOps, threat modeling, and security testing integration into CI/CD.
• Familiarity with risk and control frameworks (NIST CSF, ISO 27001) and regional regulations (e.g., MAS TRM) as applicable.
• Ability to produce reference architectures, standards, and executable guardrails/policies-as-code.
• Certifications such as CISSP, CCSP, SABSA, or CISM are advantageous.

What we offer

• Competitive base salary.
• A suite of holistic, flexible benefits to suit every lifestyle.
• Community initiatives.
• Industry-leading learning and professional development opportunities.
• Your wellbeing, growth and aspirations are every bit as cared for as the needs of our customers.
• Let’s build the bank we need for the future we want.
• Find the best version of yourself in a friendly, supportive team.
• Build lasting value in your community.
• Help people grow their assets, business, and investments.
• Take your learning as far as you can.
• Or simply enjoy a vibrant, future-ready career.
• Your Opportunity Starts Here