Job Description

Business Function
Group Technology enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group Tech, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.

About The Role:
Given the bank's sustained technological expansion, this role assumes a pivotal position in formulating an extensive Enterprise Security Architectural framework, strategy, and standards.

This role ensures that our security frameworks, controls, and strategies comply with banking regulatory requirements and protect critical financial data and infrastructure from evolving threats.

Key Responsibilities:

• Serve as a trusted advisor to stakeholders, translating business goals into security solutions, and collaborating with CTOs and CISO to design and implement a technology security roadmap that aligns with the bank’s strategic objectives.
• Fortify enterprise security architecture, including cloud platforms, ensuring alignment with financial regulatory requirements, business goals, and industry best practices. Define and maintain reference architectures and technical standards across infrastructure, applications, and data environments.
• Lead the evaluation and implementation of security tools, technologies, and services to enhance the bank's security posture.
• Partner with internal audit, legal, and compliance to ensure continuous alignment with regulatory updates and maintain audit readiness.
• Oversee security reviews and architecture of financial applications and third-party services, focusing on data privacy, encryption, and strong access controls, while embedding secure development lifecycle (SDLC) practices.
• Establish comprehensive control guardrail architectures for AI/data spaces, specifically defining guardrails for models, data, and agents.
• Create and automate security review checklists for applications, define review areas and acceptable deviations, and develop dashboards to measure and track reviews and certifications for a clear security posture.
• Develop application domain security designs that cut across multiple domains (e.g., enterprise secure API architecture, non-human identity and authentication, blockchain security patterns) and address security for emerging technologies like Agentic AI.

Key Requirements:

• Demonstrated ability to translate business strategy into technology solutions, with excellent knowledge of technical architecture, modern application design patterns (microservices, serverless), and end-to-end architecture (Java, front-end, mobile, middleware, databases, APIs, streaming).
• Extensive experience in cloud-native environments (public cloud, containers, serverless, data, credential management, monitoring), and deep knowledge of cybersecurity principles, network security, IAM, cryptography, and application security.
• Strong understanding of banking platforms, payment systems, transaction systems, regulatory constraints, and experience aligning enterprise security architecture with financial regulatory requirements and industry best practices.
• Proven expertise in establishing control guardrail architectures for AI/data spaces, including defining guardrails for models, data, and agents.
• Demonstrated ability to create and automate security review checklists for applications, define review areas and acceptable deviations, and develop dashboards for tracking the overall security posture.

• Solid experience in designing application domain security across multiple domains, focusing on enterprise secure API architecture, non-human identity and authentication for service providers, and blockchain security patterns/architecture.
• Familiarity with and ability to address security challenges in emerging technologies, such as Agentic AI or other future innovations.
• Strong background in Enterprise Architecture blueprints, ability to formulate and execute multi-year strategic initiatives
• Excellent communication and stakeholder management skills with the ability to influence key architectural decisions, and a commitment to fostering innovation and compliance.

Location:

DBS Asia Hub

Job:

Technology

Schedule:

Regular

Employee Status:

Full time