VP, Non-Human Identity Security & AI Agent Security

OCBC Bank; Singapore; On-site; SGD 180,000 - 300,000; Full time

Benefits offered by this job

Competitive base salary.

Holistic, flexible benefits.

Community initiatives.

Industry-leading learning and career/మ

Wellbeing and growth support.

Job summary

OCBC Group in Singapore invites a security engineer specializing in non-human identities to join Group CISO. You will secure machine identities, API credentials, and AI agent access, and build dashboards to show leadership how identities are controlled across the bank.

You should have 7–10 years in security analytics or identity engineering, hands-on PKI, SSH keys, and cloud workload identities, plus experience turning security data into actionable insights.

Qualifications

• Bachelor’s degree in Computer Science, IT, Cybersecurity, Data Engineering, or related field.
• At least 7 years (AVP) or 10 years (VP) in security engineering or identity engineering.
• Hands-on experience securing non-human identities: service accounts, API keys, tokens, certificates and SSH keys.
• Knowledge of PKI, certificate lifecycle, SSH key management and cloud workload identities.
• Familiarity with OAuth/OIDC, privileged access concepts and data analysis using SQL and Python.

Responsibilities

• Build and maintain discovery and inventory of NHIs and AI agents.
• Map each NHI to an owner and track credential lifecycles and expiries.
• Manage certificate and key hygiene and renewal processes.
• Operate NHI and agent lifecycle controls on the IGA platform.
• Build dashboards for senior leadership on privileged accounts and credential rotation.
• Turn raw security data into trend analysis, anomaly detection and risk indicators.

Skills

Data analysis

Privileged access

Identity governance

PKI & certs

SSH key management

Cloud workloads identities

API security

OAuth/OIDC

SQL

Python

Dashboarding

CI/CD security

Education

Bachelor’s degree in Computer Science / IT / Cybersecurity / Data Engineering

Tools

Power BI

GitHub Secrets

AWS Secrets Manager

Azure Key Vault

Cloud KMS

Job description

OCBC Group in Singapore invites a security engineer specializing in non-human identities to join Group CISO. You will secure machine identities, API credentials, and AI agent access, and build dashboards to show leadership how identities are controlled across the bank.

You should have 7–10 years in security analytics or identity engineering, hands-on PKI, SSH keys, and cloud workload identities, plus experience turning security data into actionable insights.