VP, Cloud Security Lead

1011 United Overseas Bank Ltd; Singapore; On-site; SGD 180,000 - 320,000; Full time

Job summary

United Overseas Bank Limited (UOB) seeks an accomplished Cloud Security leader to drive the cloud security strategy across AWS, Azure, OpenShift, and container platforms. You will shape governance, standards, and security reference architectures to enable secure cloud adoption.

With 10+ years in information security or cloud security, you will lead enterprise-scale initiatives, collaborate with development and platform teams, and guide risk-based measures and regulatory compliance to strengthen

Qualifications

• 10+ years in information security or cloud security.
• Experience securing public cloud platforms (AWS, Azure) and hybrid environments.
• Leadership experience in enterprise settings within regulated industries.
• Certifications such as CISSP, CCSP, or equivalent are advantageous.

Responsibilities

• Lead the execution of the cloud security strategy across AWS, Azure, OpenShift, and container platforms.
• Establish and maintain cloud security policies, standards, guardrails, and reference architectures.
• Drive CNAPP, CSPM, CIEM, CWPP, and container/Kubernetes security initiatives.

Skills

Cloud security leadership

Cloud security strategy

Stakeholder management

Security governance

DevSecOps collaboration

Tools

Prisma Cloud

Wiz

Microsoft Defender for Cloud

OpenShift

EKS

AKS

GKE

CI/CID tools

Job description

About UOB

United Overseas Bank Limited (UOB) is a leading bank in ASEAN with a global network in Southeast Asia, Asia Pacific, Europe and North America. Operating through our head office in Singapore and banking subsidiaries in China, Indonesia, Malaysia, Thailand and Vietnam, we have a global network of about 430 branches and offices in 19 markets. At the heart of UOB is our culture, shaped by the UOB Way and anchored on our four values – Honourable, Enterprising, United and Committed. For more than 90 years, these values have guided how we do right by our customers, collaborate with one another and create long-term value for the communities we operate in. As One Bank, we are committed to helping our colleagues build sustainable careers grounded in purpose, supported by strong values, and enriched with meaningful opportunities to grow.

UOB is rated as one of the world's top banks, ranked 'Aa1' by Moody's Investors Service and 'AA-' by both S&P Global and Fitch Ratings. With a global network of 500 branches and offices across 19 countries in Asia Pacific, Europe and North America. In Asia, we operate through our head office in Singapore and banking subsidiaries in China, Indonesia, Malaysia, Thailand and Vietnam, as well as branches and offices throughout the region.

Key Responsibilities

Execute Cyber (ICS) Strategy within cloud environments by establishing and delivering the cloud security operating model, standards, controls, and technology roadmap across public, private, and hybrid cloud platforms.

Establish and maintain cloud security policies, standards, guardrails, and security reference architectures aligned with regulatory requirements and industry best practices.

Lead the implementation, governance, and continuous optimization of cloud security capabilities, including:

• Cloud Security Posture Management (CSPM)
• Cloud Native Application Protection Platforms (CNAPP)
• Cloud Infrastructure Entitlement Management (CIEM)
• Cloud Workload Protection Platforms (CWPP)
• Container and Kubernetes Security
• Cloud Security Monitoring and Detection

Drive the secure adoption of cloud services across AWS, Azure, OpenShift, Kubernetes, and cloud-native technologies by providing security architecture, governance, and engineering guidance.

Establish cloud governance and continuous compliance monitoring capabilities to identify security gaps, misconfigurations, excessive privileges, and policy violations.

Implement and maintain cloud identity and access management controls, including privileged access, workload identities, service principals, application identities, secrets management, and non-human identities.

Lead cloud security assessments, architecture reviews, design consultations, and security approvals for cloud initiatives and technology transformation programmes.

Partner with development and platform engineering teams to integrate security controls into CI/CD pipelines, Infrastructure-as-Code (IaC), and DevSecOps processes.

Provide cloud security guidance and subject matter expertise on cloud vulnerability management, container image security, cloud configuration management, and remediation initiatives to continuously improve the Bank's cloud security posture.

Establish cloud security logging, monitoring, detection, and security analytics capabilities to support cyber defense, threat detection, and incident response activities.

Establish risk-based governance processes to assess, monitor, and manage cloud security risks, policy exceptions, compliance gaps, and remediation activities across cloud environments.

Provide subject matter expertise in cloud-related audits, regulatory reviews, risk assessments, and compliance activities.

Develop cloud security metrics, dashboards, risk reporting, and executive updates to provide visibility into cloud, container, and platform security posture and control effectiveness.

Drive automation, standardization, and continuous improvement initiatives to enhance operational efficiency and strengthen security outcomes.

Evaluate and establish security controls for emerging cloud technologies, cloud-native services, and AI/ML platforms to ensure risks are appropriately managed.

Act as the senior cloud security subject matter expert for regulatory reviews, audit engagements, and technology risk governance forums relating to cloud security.

Lead, coach, and develop cloud security professionals while fostering strong stakeholder engagement across technology and business teams.

Requirements

• Minimum 10 years of experience in Information Security, Infrastructure Security, Cloud Security, or Cybersecurity Engineering, including leadership responsibilities within enterprise environments.
• Strong experience securing public cloud platforms, including: Amazon Web Services (AWS) Microsoft Azure Hybrid Cloud environments
• Demonstrated experience designing and implementing enterprise-scale cloud security architectures across AWS, Azure, and hybrid cloud environments.
• Deep understanding of Cloud Security Architecture, including: Network Security Identity & Access Management Cloud-Native Security Controls Data Protection
• Strong experience with cloud security platforms and capabilities such as: Native Cloud Security Controls Prisma Cloud Wiz Microsoft Defender for Cloud
• Strong experience in Container and Kubernetes Security, including OpenShift, EKS, AKS, GKE, image security, runtime protection, and container governance.
• Experience implementing and managing CNAPP, CSPM, CIEM, CWPP, and Cloud Detection & Response capabilities.
• Strong understanding of DevSecOps, Infrastructure-as-Code, and automation technologies including Terraform, GitHub, GitLab, Azure DevOps, Jenkins, and CI/CD pipelines.
• Strong experience in cloud identity security, privileged access management, secrets management, workload identities, service accounts, certificates, and machine identities.
• Strong understanding of cloud governance, cloud operating models, shared responsibility frameworks, and secure cloud adoption principles.
• Good understanding of cloud regulatory and control frameworks, including: MAS Technology Risk Management (TRM) NIST Cybersecurity Framework CIS Benchmarks ISO 27001 CSA Cloud Controls Matrix (CCM) PCI DSS
• Experience leading cloud security assessments, threat modelling, risk assessments, and remediation programmes.
• Proven leadership experience managing cloud security teams, driving strategic initiatives, influencing senior stakeholders, and delivering large-scale security transformation programmes.
• Strong stakeholder management, leadership, communication, and influencing skills, with the ability to engage senior management, regulators, auditors, architects, engineers, and project teams.
• Experience working within large financial institutions or other highly regulated environments is strongly preferred.
• Professional certifications such as CISSP, CCSP, AWS Certified Security - Specialty, Microsoft Azure Security Engineer, CCSK, CISM, or equivalent cloud security certifications are advantageous.

UOB is an equal opportunity employer. UOB does not discriminate on the basis of a candidate's age, race, gender, color, religion, sexual orientation, physical or mental disability, or other non-merit factors.