VP, Cloud Security Lead

UOB; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

1011 United Overseas Bank Ltd in Singapore seeks a senior cloud security architect to lead our cloud security program across AWS, Azure, OpenShift, and Kubernetes. You will shape security strategy, architecture, and governance for multi-cloud environments.

You will drive CSPM, CNAPP, CIEM, CWPP implementations, integrate security into CI/CD and IaC, mentor teams, and partner with risk, compliance, and engineering to strengthen the bank's defenses.

Qualifications

• 10+ years in information security or cloud security with enterprise leadership.
• Strong experience securing AWS, Azure, and hybrid clouds.
• Designing enterprise-scale cloud security architectures across AWS, Azure, and hybrid environments.
• Deep understanding of cloud security architecture: network, IAM, data protection.
• Experience with CNAPP, CSPM, CIEM, CWPP, and cloud detection & response.
• Proficient in DevSecOps, IaC, and automation tools like Terraform and CI/CD pipelines.
• Cloud identity and access management, privileged access, secrets management.
• Regulatory frameworks: NIST, CIS, ISO27001, PCI DSS in cloud contexts.
• Leadership in security assessments, threat modelling, risk remediation.
• Strong stakeholder management and communication; financial industry experience preferred.

Responsibilities

• Define and deliver cloud security operating model and standards across public, private, and hybrid clouds.
• Lead CSPM, CNAPP, CIEM, CWPP initiatives and tooling implementations.
• Provide security architecture guidance for AWS, Azure, OpenShift, Kubernetes.
• Oversee cloud governance, risk, and compliance monitoring and remediation.
• Embed security controls into CI/CD pipelines and IaC (DevSecOps).
• Lead cloud security assessments, architecture reviews, and regulatory discussions.

Skills

Cloud security strategy

Security architecture

Leadership

Regulatory compliance

Threat modelling

Tools

AWS

Azure

OpenShift

Kubernetes

CNAPP

CSPM

CIEM

CWPP

Prisma Cloud

Wiz

Defender for Cloud

Terraform

GitHub

GitLab

Azure DevOps

Jenkins

Job description

Company: 1011 United Overseas Bank Ltd

About UOB

United Overseas Bank Limited (UOB) is a leading bank in ASEAN with a global network in Southeast Asia, Asia Pacific, Europe and North America. Operating through our head office in Singapore and banking subsidiaries in China, Indonesia, Malaysia, Thailand and Vietnam, we have a global network of about 430 branches and offices in 19 markets. At the heart of UOB is our culture, shaped by the UOB Way and anchored on our four values – Honourable, Enterprising, United and Committed. For more than 90 years, these values have guided how we do right by our customers, collaborate with one another and create long-term value for the communities we operate in. As One Bank, we are committed to helping our colleagues build sustainable careers grounded in purpose, supported by strong values, and enriched with meaningful opportunities to grow.

Job Description

Key Responsibilities

• Execute Cyber (ICS) Strategy within cloud environments by establishing and delivering the cloud security operating model, standards, controls, and technology roadmap across public, private, and hybrid cloud platforms.
• Establish and maintain cloud security policies, standards, guardrails, and security reference architectures aligned with regulatory requirements and industry best practices.
• Lead the implementation, governance, and continuous optimization of cloud security capabilities, including:
  • Cloud Security Posture Management (CSPM)
  • Cloud Native Application Protection Platforms (CNAPP)
  • Cloud Infrastructure Entitlement Management (CIEM)
  • Cloud Workload Protection Platforms (CWPP)
  • Container and Kubernetes Security
  • Cloud Security Monitoring and Detection
• Drive the secure adoption of cloud services across AWS, Azure, OpenShift, Kubernetes, and cloud-native technologies by providing security architecture, governance, and engineering guidance.
• Establish cloud governance and continuous compliance monitoring capabilities to identify security gaps, misconfigurations, excessive privileges, and policy violations.
• Implement and maintain cloud identity and access management controls, including privileged access, workload identities, service principals, application identities, secrets management, and non-human identities.
• Lead cloud security assessments, architecture reviews, design consultations, and security approvals for cloud initiatives and technology transformation programmes.
• Partner with development and platform engineering teams to integrate security controls into CI/CD pipelines, Infrastructure-as-Code (IaC), and DevSecOps processes.
• Provide cloud security guidance and subject matter expertise on cloud vulnerability management, container image security, cloud configuration management, and remediation initiatives to continuously improve the Bank’s cloud security posture.
• Establish cloud security logging, monitoring, detection, and security analytics capabilities to support cyber defense, threat detection, and incident response activities.
• Establish risk-based governance processes to assess, monitor, and manage cloud security risks, policy exceptions, compliance gaps, and remediation activities across cloud environments.
• Provide subject matter expertise in cloud-related audits, regulatory reviews, risk assessments, and compliance activities.
• Develop cloud security metrics, dashboards, risk reporting, and executive updates to provide visibility into cloud, container, and platform security posture and control effectiveness.
• Drive automation, standardization, and continuous improvement initiatives to enhance operational efficiency and strengthen security outcomes.
• Evaluate and establish security controls for emerging cloud technologies, cloud-native services, and AI/ML platforms to ensure risks are appropriately managed.
• Act as the senior cloud security subject matter expert for regulatory reviews, audit engagements, and technology risk governance forums relating to cloud security.
• Lead, coach, and develop cloud security professionals while fostering strong stakeholder engagement across technology and business teams.

Requirements

• Minimum 10 years of experience in Information Security, Infrastructure Security, Cloud Security, or Cybersecurity Engineering, including leadership responsibilities within enterprise environments.

• Strong experience securing public cloud platforms, including:

  • Amazon Web Services (AWS)
  • Microsoft Azure
  • Hybrid Cloud environments

• Demonstrated experience designing and implementing enterprise-scale cloud security architectures across AWS, Azure, and hybrid cloud environments.

• Deep understanding of Cloud Security Architecture, including:

  • Network Security
  • Identity & Access Management
  • Cloud-Native Security Controls
  • Data Protection

• Strong experience with cloud security platforms and capabilities such as:

  • Native Cloud Security Controls
  • Prisma Cloud
  • Wiz
  • Microsoft Defender for Cloud

• Strong experience in Container and Kubernetes Security, including OpenShift, EKS, AKS, GKE, image security, runtime protection, and container governance.

• Experience implementing and managing CNAPP, CSPM, CIEM, CWPP, and Cloud Detection & Response capabilities.

• Strong understanding of DevSecOps, Infrastructure-as-Code, and automation technologies including Terraform, GitHub, GitLab, Azure DevOps, Jenkins, and CI/CD pipelines.

• Strong experience in cloud identity security, privileged access management, secrets management, workload identities, service accounts, certificates, and machine identities.

• Strong understanding of cloud governance, cloud operating models, shared responsibility frameworks, and secure cloud adoption principles.

• Good understanding of cloud regulatory and control frameworks, including:

• • MAS Technology Risk Management (TRM)
  • NIST Cybersecurity Framework
  • CIS Benchmarks
  • ISO 27001
  • CSA Cloud Controls Matrix (CCM)
  • PCI DSS

• Experience leading cloud security assessments, threat modelling, risk assessments, and remediation programmes.

• Proven leadership experience managing cloud security teams, driving strategic initiatives, influencing senior stakeholders, and delivering large-scale security transformation programmes.

• Strong stakeholder management, leadership, communication, and influencing skills, with the ability to engage senior management, regulators, auditors, architects, engineers, and project teams.

• Experience working within large financial institutions or other highly regulated environments is strongly preferred.

• Professional certifications such as CISSP, CCSP, AWS Certified Security - Specialty, Microsoft Azure Security Engineer, CCSK, CISM, or equivalent cloud security certifications are advantageous.

Additional Requirements

Be a Part of the UOB Family

UOB is an equal opportunity employer. UOB does not discriminate on the basis of a candidate’s age, race, gender, color, religion, sexual orientation, physical or mental disability, or other non-merit factors. All employment decisions at UOB are based on business needs, job requirements and qualifications. If you require any assistance or accommodations to be made for the recruitment process, please inform us when you submit your online application.